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1.0 INTRODUCTION 

1.1 BASIC CONCEPTS AND DEFINITION OF TERMS 



1.0 INTRODUCTION 



IPLOS Storage Management provides the mechanism through 
which a user of the system can createt organize and manage 
Storage Structures. 

This section specifies the IPL Storage System's external 
Interface, describes the design considerations leading to it and 
gives an overview of the supporting internal structure. 

An IPL user's programs and data* partially forming a Job 
(see Chapters *f and 9), are contained within an Address Space. 
Its extent is dellniated by a Segment J)escriptor_Tabl ei 
Contro l_PQints define the number of potentially parallel 
executions of code within this Address Space. Data* Program* 
Job f Storage* etc.. Management procedures of Task Services, 
within the Address. Space, assist the user, and each other, with 
organizing, controlling and managing a Job, with interfacing to 
System/Subsystem/User Jobs and with the controlled sharing of 
Storage Structures within ahd among separate Address^Spaces. 

System/Subsystem Jobs, in conjunction with System Monitor, 
manage and control User Jobs and schedule the system's resources 
to accomplish work, and hence, to complete User Jobs* 



ETS ANfl 



OF TERMS 



File - A file is a named entity consisting of an ordered set of 
elements. The Storage System is only aware of files stored 
on direct access mass-storage (disk, drum) devices. 

File Control Block - A File Control Block is a symbolically 
addressable table that contains a description of the logical 
properties of a file. 

Physical File Descriptor - The Physical File Descriptor is an 
internal system table that contains a description ot the 
physical properties of a file. 

Physical Space Map - A Physical Space Map represents the storage 
space allocated to a mass-storage file and is recorded within 
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its Physical File Descriptor. 

Temporary File - A temporary file is one for which a description 
of its logical and physical characteristics exists only in 
the File Control Block, the Physical File Descriptor and 
other internal system tables. 

Permanent File - A permanent file is a mass storage file for 
which the description of its logical and physical 
characteristics has been' recorded in a catalog. 

Sector - The smal lest addressable block of • storage on a 
mass-storage device. Standard IPL sector sizes are 512, IK^ 
2K,^K and 8K bytes. page_frames are not supported initial iy 
by IPL's Central Processors). 

Real Address - An address generated by an IPL processor in real 
addressing mode (see Model Independent Processor-Memory 
GDS). 

Real Memory - Real Memory, or just memory, or real storage, or 
main memory is memory addressable by an IPL processor via a 
real address. 

Page Frame - A page frame is a block of real memory. Real memory 
is managed in units of page frames. Standard IPL page frame 
sizes are 512, IK, 2K, «»<, 8K and 6^K bytes (6^K sized 
page-frames are not supported initially by IPL's Central 
Processors). 



External Storage - Storage Space 
processor as real memory. 



not addressable by an IPL 



Physical Record - A physical record is the smallest unit of data 
transfer between memory, and external storage. Sector and 
page- frame are examples of physical records. 

Block - A block lis the logical unit of transfer between memory 
and the mass storage space allocated to a file. Standard IPL 
block sizes are 2»»N multiples of the minimum page frame 
size. 

Input/Output Subsystem - The hardware/firmware/software 

components of the peripheral configuration. 

Device Driver - Device Drivers manage the interface between IPLOS 
and other members of the Input /Output Subsystem. 
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l.D INTRODUCTION 

1.1 BASIC CONCEPTS AND DEFINITION OF TERMS 



Bloch Manager - Block Management procedures provide a relatively 
device Independent Interface between elements of IPLOS and 
Device Drivers. 

Address Space - c.f.f 1.2. 

Segment - c.f.» 1.2. 

Virtual Address - c.f.t 1.2. 

Virtual Memory Mechanism - VMM Is a system feature of IPL which 
changes a virtual address Into a real memory addresst and 
performs dynamic access controlt during an execution of an 
Instruction. 

Page - A page Is a fixed length block of Instructions? data or 
bot^ that can be transferred between real storage and 
external storage. 

Paging - Paging Is the process of transferring pages between real 
memory and external storage. It Is the method of IPLOS' 
memory management and the standard method for accessing a 
file's storage space. A user can request that the storage 
system performs all transfers In groups of pages equal to the 
file's block size or In multiple pages equal to the system's 
current page frame size. 

Paging Storage - External Storage Space subal located and managed 
by the Storage System* 

Direct Segment - A mass-storage file made directly addressable as 
a segment* within an Address Space. The file's block-size 
must be a power of two multiple of the minimum IPL page size 
(512 bytes). The segment's virtual address range is 

associated with the storage space* represented by the file's 
Physical Space Map* on a continuous byte-to-byte basis. 
Storage space Is allocated dynamical I y* on a one-to-one basis 
without gaps* to the correspondln^g virtual address range* up 
to and including the highest block accessed* which must be 
within the currently defined file size. Address of the last 
block written is recorded by Block Manager within the 
Physical File Descriptor. All intervening blocks (e.g.* 
blocks between the last written and the currently accessed 
one) are initialized to Null (i.e.* all zeroes) by the 
Storage System. Since this is a relatively high overhead 
operation* Direct Segments should be accessed initially and 
allocated storage space only sequentially. In this case* no 
extra output transfers are generated. A block accessed for 

NCR/CDC PRIVATE REV 06/23/75 
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the first time is cleared to Null within real memory and the 
corresponding page(s> eventually written to external storage 
due to normal paging operations. Direct Segments can be 
associated with Permanent or Temporary Files. Paging is 
performed directly between real memory and the associated 
file's storage-space. 

Mapping - Mapping is a technique used to associate virtual 

address and real address. Virtual Memory Mechanism is the 

system feature (software and hardware) which accomplishes 
mapping. 

Fetch Policy - The Fetch Policy determines when information is to 
be loaded into real memory from external storage. 

Replacement Policy - The Replacement Policy determines which 
Information is removed from real memory to external storage. 

Placement Policy - Placement Policy determines which unallocated 
region of memory will contain the incoming information. 

Page Table - Page Table indicates whether a page is in real 
storage and correlates virtual with real storage addresses. 
There is one Page Table in an IPL System. 

Thrashing - Thrashing is a phenomenon which occurs in a 
multiprogramming system when memory is overcommltted. 

Fragmentation - Fragmentation occurs when a system suffers from a 
loss of usable storage. 

Pool File - Paging Storage is specified to the Storage System as 
one or more Pool Files. The Storage System subal locates the 
external storage space* reprissented by a Pool File's Physical 
Space Map. A Storage System initiated paging operation is 
performed as per a Pool File's Physical Fi le.Descriptor. 
Theretore standard Block Management and Device Driver 
interface conventions apply. A Pool File can be temporary or 
permanent* shared globally* or local to an Address Space. 

Temporary Segment - A Temporary* or Transient, Segment cannot 
survive beyond the creating Address Space's existence. 
Several Temporary Segments can be associated with a file 
(e.g.* a Pool.Flle). Storage- System maintains the 

segment-to-tlle storage space maps within its internal 
tables. Storage space is allocated dynamically* on a 
block-by-block basis* whenever the corresponding virtual 
memory is accessed for the first time. Each new block is 

NCR/CDC PRIVATE REV 06/23/75 
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1.0 INTRODUCTION 

1.1 BASIC CONCEPTS AND DEFINITION OF TERMS 



recorded as a separate entry within the Segment Control 
Table. Temporary Segment's storage space can contain 'gaps' 
and thus it is not necessarily allocated continuously up to 
the highest blocK accessed. Temporary Segments provide a 
convanientf low overhead mechanism for allocating and 
managing storage for temporary data structures* i. e. » 

o Stacks 

o Working Storage 

o Heaps 

o Binding Segment 

o Object Module: Code Segments 

o Local LNS Segments 

o Etc. 

A Temporary Segment can not be saved and made permanent t like 
a Temporary File» since no File Control Block is defined 
which contains the description of its logical attributes. 

Physical Tables Heap - PTH is a one-per-system segment which 
contains internal system tablesy used and managed by the File 
and Storage System. It has Read/Write access tn the System 
Job's Address Space and Read only access in all other Address 
Spaces. 

Transient Segment - See Temporary Segment. 

Segment Control Table - A SCT is a table in the Physical Tables 
Heap that contains the description of the physical 
properties* or attributes* associated with the segment. 

Segment Descriptor Table - Software name for the Process Segment 
Table. It defines the Address Space of a Job and contains 
its segment descriptors. (See Model Independent 

Processor-Memory GDS). 



Indirect Segment - A Direct Segment wh 
are held within Paging Storage, 
request (c.f.* 6.1.2. l.<») must be m 
before any data is transferred to 
storage space. Indirect Segments 
precise control over file updating* 
used/modified in parallel by seve 
more table space is required by 
Temporary or Direct ones. SC#Ma 
generate additional I/O transfers* 
required by normal paging ope rat 
they should only be used when ^ 



ose modified pages/blocks 

An expilicit SC#Map_Out 

ade to the Storage System 

the associated file's 

enable a user to exercise 

even while it is being 

ral tasks/Jobs. However, 

Indirect Segments than 

p.Out requests might also 

over and beyond those 

ions. For these reasons* 

t he i ncraa se ins yst e m 
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resiliency warrants the extra overhead incurred. 

Suffer Segment - A Temporary Segment whose associated 
page-frames* in real memory* are used by Block Management 
procedures to transfer data to/from; 

.0 Mon standard files 

o Archival devices (magnetic tape like) 

o Remote devices (via communication links) 

o Unit-record devices* 

o Mass-storage devices not conforming to IPL 

standards* 

o etc. 

Page of a Buffer Segment is locked into real memory while any 
Block Manager initiated transfers, are in progress* and/or 
outstanding* for the page-frame occupied by that page. At 
all other times the page's memory/paging-storage residency is 
controlled by the standard Fetch/Replacement Policies. 
Page-frames occupied by a Buffer Segment's pages are not 
a I located contiguously in real memory. The Input/Output 
Subsystem provided scatter-read/gather-write capability is 
utilized to maintain uninterrupted data transfers across 
physical records. 

Storage Structure - All identifiable entities known and 
controlled by the Storage System are called Storage 
Structures. Pages* Segments* Segment.Control.Tables* 

Physical^Fi le.Descriptors, Segment_Descriptors and 

Segment_Descriptor_Tables are examples of Storage 

Structures. 



Working Set - WS is the set of pages currently being 
used by cooperating Tasks within one Address.Space. 



actively 
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Validation Level - Validation Level is the ring number of the 
Arguraent_Pointer_Register (A6) on entry into a request 
processor of the Storage System. (See Model Independent 
Processor- Memory GOS* 2.6.1.2). 

Memory Region - IPL processors have two memory ports and thus 
might be connected to a region of an installation's memory 
which is not accessible by all the processors of the system.^ 
System and subsystem Jobs can request specific assignment of 
segment pages to page frames of a Memory Region* 
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1.0 INTRODUCTION 

1.2 SiORAGE SYSTEM'S FUNCTIONS 



1.2 STQRAQE SYSTSh'S fVNCTIONS 



The primary function of the IPL Storage System is to 

The Address Space of a real processor in an IPL system is a 
Segmented Address Space. A segment is an entity defined byt 

o A liajBS which uniquely identifies the segment. 

o A Descriptor which describes the properties or attributes 
associated with the segment* 

A ^ftdv which is an array of consecutive elements. The 
Body of a segment is an ordered set of etementst called 
bytes (or cells in 5HL terminol ogy) » each of which is 
identified within the Segment body by an integer i, its 
index. The number of elements in the body is called the 
length of the segment. 

A Job's Address Space* or virtual memoryt is an ordered set 
of as many as 2»»12 segments each consisting of as many as 2»»31 
bytes. 

The IPL hardware interpretabi e virtual address is a pair of 
integers consisting of a segment number and a location within 
that segment. In order for a program to execute a reference to 
data* it must have an address of this form. Hence » it is the 
Storage^System's responsibility to njao files , which are stored on 
direct ^ access Mass Storage devices (disks* drums* etc.) 
into/out-of the hardware Address Space so that the Job owned 
tasKs can address them directly. In addition to transforming a 
symbolic reference into a machine address* the Storage System 
must be concerned with moving ^ata from external storage into 
memory in order for it to be directly ref erenceable . 

In most contemporary systems on-line information* stored on 
mass storage devices* is generally accessed as copies of files 
thru buffers locked into real memory. In contrast* alt on-line 
information in an IPL system can be ^jpftct Iv referenced via the 
segmented virtual memory mechanism. Al I . on- line information can 
be now controlled and managed by the Storage System. As far as a 
user is concerned* data transfers to/from off-line devices are 
into/out-of the System's Storage Space and Q2t his own local 
memory. Residency of a user's code and data* in real or external 
storage* or between levels of the storage hierarchy (cache -> 
Bipolar Memory -> MOS Memory -> Magnetic Bubble Memory -> Fixed 
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Head Disks -> Moving Head Disks -> Tape Library -> Off-line 
Devices...)* is goverened by usage and schedul ing requirements on 
a q|p t>al level. The globally managed Storage Space has to be 
utilized in a yiiLLQEJS manner by both the system and its 
users. Tbs, distinct iflp b^twcsD traditional mass-storage files* 



manafjg^ fry the user himself ian<a <;tirectlY addressable wemory 

now almost disappfi^r^ f l^ 



has 



Non on-line 
remote (via communi 
conforming to IPL 
Buffer management 
contro I the al I oca 
however* physical i 
of the explict I y 
Storage System 
residency. 



archival (magnetic tape like!)* unit-record* 

cation links) and mass storage devices not 

standards are addressed via Buffer Segments. 

software within user Address^Spaces will 
t ion and useage of buffers in Buffer Segments* 
emory is only locked down during the duration 

initiated transfers. At all other times* the 
controls the buffers raemory/mass-storage 



As far as possible* logical, control and management of data 
is performed within user Address Spaces. Phvslcaf data-container 
and data-flow functions of the operating system are processed 
outside user Address Spaces , to maintain a well controlled 
fire-wall between misbehaving elements of the software/hardware 
complex. Another important reason for the separation between 
logical/physical elements of the operating system is the global 
scheduling environment. Since resource control has to be 
performed globally* effective system uti lization can only be 
guaranteed by separating out and exactly defining necessary 
control information. 

The Operating System functions listed below are major users 
of* or used extensively by* the Storage System. Internal system 
Interface conventions* data and control -flow are also documented 
within the following subsections. 

o Interpretive access to data for direct* indirect or buffer 
segments* is control led by File Access Pro cedure?. 

o Data transfer between real memory and peripheral devices 
is managed by Block Management and Device Drivers in a 
System Job. 



o Device or Volune^Set allocation and al I 
scheduling is performed by Job Managemept . 



resource/Job 



o Volume (tape* disk) mounting/demounting and label 
processing is the responsibility of Mounf Qffnt^ftt within a 
System Job. It is functioned by requests via signals from 
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1.0 INTRODUCTION 

1.2 STORAGE SYSTEM'S FUNCTIONS 
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1.0 INTRODUCTION 

1.2.1 SEGMENT MANAGEMENT FUNCTIONS 



other Jobs. 

Storage System consists of two major divisions which are 
responsible for Segment Management and Memory Managementf 
respectively. The major function of each division is described 
below. 



1.2.1 SEGMENT MANAGEMENT FUNCTIONS 



Segment Control is responsible for the fol lowing storage 
struct urest 

o Direct, Indirect and Temporary Segments 

o Buffer Segments, for buffering files not accessed via the 
virtual memory mechanism of IPL« 

Access to segments is controlled by hardware. Segment Control 
checks all explicit requests directed at Buffer Segments fort 

o Access rights 

o Buffer residency 

o Retrieval from external-storage pages of Buffer-Segments 
when a Virtual -Buffer is not present In memory 

o Conversion of Process Virtual into System Virtual and/or 
Real Memory Address 

o Locking Pages for duration of peripheral transfers 

o Keeping account of outstanding data transfers, 

into/out-off Address.Space local Buffer Segments, on a per 
Control^Point basis. 



Segment 
assistance) 



u nction St (in addition to Block Management 



o Assist the File System in the Creatloh, Oeletiont 
Labelling and Cataloging of Segments/Files held on 
mass-storage and archival devices. 
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Manage the allocation of space to segments on external 
storage (Space Control). 

Organize page Working-Set swapping and move Job-Private 
Storage and System Tables to/from external storage (Swap 
Control). 

Organize the movement of System-Global Storage_Tabl es 
between memory and external storage according to usage and 
scheduling considerations (GST Control). 

Assist System Monitor with the creation and deactivation 
of 4ddress_Spaces (Address.Space Control). 

Organize the migration of storage structures between 
levels of the storage hierarchy (Migration • Control ) . 



Support the shared usage 
Control ). 



of storage structures (Share 



Perform primary level error recovery, in case of memory 
parity errors, and assist in memory reconfiguration 
(Recovery Control). 

Maintain Storage System restart information (Recovery 
Control). 

Provide a set of procedures for the management of Storage 
System Tables (SST Control). 



1.2.2 MEMORY MANAGEMENT FUNCTIONS 



The unit of memory management is a page.frane. Page-frame 
size is set at System Oeadstart and can vary between a minimum of 
512 bytes and maximum of 64k bytes. 

Page Control is responsible for the management of real 
memory according to usage and scheduling requirements. 



Page Qo 



nction st 



o . Maintain a record of the status of each page In memory and 
process any requests involving the allocation, locking and 
fixing in real storage, release or change in status of 
memory page frames. 
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1.0 INTRODUCTION 

1,2,2 MEMORY MANAGEMENT FUNCTIONS 
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1.0 INTRODUCTION 

1.3 GENERAL STRUCTURE 



Maintain Jobs* page Working-Sets (MS) tor Job Scheduler 
and Swap Control. 

Control memory occupancy based on usage and scheduling 
requirements. 

Process all requests for movement of pages from real 
memory to external storage and vice-versa in segment 
dependent block size (block size must be 2^^N multiple of 
minimum page frame size). 

Perform second level error processing! in conjunction with 
Block Management* in case of errors due to paging 
operations. 

Perform second level error processing in casd of memory 
parity errors. . 



!• 3 GENERAL STRUCTURE 



Page Control and most of Segment Control function as 
procedures within a System Job. (See Chapters, Figure 1.2-1). 
Most of Page Control procedures are permanently memory resident. 

User and Data Management interface functions of Page and 
Segment Control are performed by request processors within Task 
Services of the requesting Job. 

Standard means of communication between Storage Management 
procedures* within a System Job* and other Jobs is via signals. 
Task Services level request processors are provided for creating 
and routing signals to the System Job* therefore* request 
processor interfaces can conform to SWL calling convensions. 
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Structifl^e Overview 
Figure 1-1 
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2.0 £A£ 



AND S 



Paging is a memory management scheme that organizes memory 
into fixed size blocks called paoe frames and organizes the 
address space into fixed size blocKs called pages . Any page of 
an address space can potentially reside in any page frame in 
memory. 

Paged virtual memory is a feature of IPL. Virtual memory* 
or storage, consists of at least two levels* to be accessible to 
the processors* information must reside in the highest (fastest)* 
or real storage/memory. 

IPLOS will use a variant of what is known as d gingnd p^g^na 
in which a page/block is brought into memory only when needed* a 
policy which under certain circumstances (seldom satisfied in 
real systems) is optimal. The operating system's 

scheduling/memory management routines accept a^v^c ^ requests from 
users on intended future Virtual memory usage and t^ l ock-^wap a 
Job's pages on termination or start of a ma | or flnf^ si ice . 

The page p t ac^ment pol icv . which is how to select the page 
frame in which to place an incoming page* is simple under demand 
paging. If there is an empty page frame* use it; if not* remove 
some page (according to the^ replacement pol icv ) from memory* and 
use the page frame thus made available. Every time an attempt is 
made to access a page which is not in memory* a p^ae interrupt is 
said to occur* and this page is brpught into memory. A page 
interrupt is costly in terras of lost processing time* since the 
processor must execute the page replacement and page placement 
policy algorithms* and then may often have to wait (if there is 
no other task to run) white that page is fetched. It is 
desirable therefore* and the objective of a paging algorithm* to 
minimize the number of page interrupts. The paging algorithm 
under a demand paging policy is equivalent to the page 
replacement policy. 



2. 1 PAGINiS Al^GORITHMS 



Most paging algorithms* with respect to the amount of memory 
space per task/Job they assume* fall into two classest 
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2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 

2.1 PAGING ALGORITHMS 



1) 



Assume that the amount of space a program has is fixed; 



2) 



o Random (RAND) 

o First_in_f irst^out (FIFO) 

o Least_recent I y_used (LRU) 

o Least_Frequent ly_Used (LFU) 

o MIN 

Tne remaining algorithms all allow the number of page frames 
used by a given program in a multiprogramming environment to 
vary* 

o Multics 

o CP-67 

o Page Fault Frequency (PFF) 

o Working-Set (WS) 

Oamped-Working-Set (VMOS - Univac) 

o IBM 0S/VS2-1 

o Burroughs' B6700 (not frames but space varies) 

These algorithms also differ substantially in their 
effectiveness and in their ' difficulty of implementation* for 
example* FIFO and RAND are easy to implement but inefficient* 
while LRU and Working Set* which are re lat ive ly. efficient but 
costly to implement. 

Generally* paging supervisors maintain a pool of free page 
frames. Whenever the number of free page frames falls below a 
predetermined value* the paging supervisor replenishes the free 
page queue by taking pages from a program. 

Among the above algorithms the more important are the 
f ol lowing! 

i,RU (Least-Recent I y- Used) - Remove the page from' memory that has 
not been referenced for the longest amount of time. 

Multics - This algorithm uses a pointer that rotates through the 
page frames in memory. With every frame is associated a use 
bit* which is turned on when the page frame is referenced. 
When a page frame is needed* the page frame pointed to by 
the pointer is examined. If the use bit is on* the bit is 
turned off* the pointer is advanced and the page frame now 
pointed to is examined. If it is off* the page in that page 
frame is removed and the new page is placed in there. 
Multics* algorithm can be viewed parametrical I y such that at 
one extreme it has a page removal strategy of FIFO and at 
the other extreme a removal strategy of LRU. The CP-67 
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2.1 PAGING ALGORITHMS 
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2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 

2.1 PAGING ALGORITHMS 



operating system uses alaiost the same algorithm. 



IB^ QS /VS^-I, With every page 
modified bit. Page frames 
according to the settings 
There is an active page 



frame is associated a used and 

are selected for reclaiming 

of the used and modified bits. 

queue for each possible 



configuration of the used and modified bits* 

The page has not been used since the last inspect iont and 
has not been modified. 

o The page has not been used since the last inspection* but 
was modified at some previous time. 

o The page has been used since the last inspect ion* but has 
not been modified. 

o The page has been used since the last inspection* and has 
been modified. 



Each queue is maintained in a f 
thus preserving a record of the co 
each page. The use and modify bits 
the CPU. Since the pages are cons 
and changed* the bit settings 
interrogated as when the page frame 
particular queue. As the paging 
the queues* it steals those pa 
remained unchanged. Those page 
changed are moved to the appropriat 



irst-in» tirst 
reparative Ion 

are set autom 
tantly being 
may not be th 

was first pi 
routine serial 
ge frames wh 

frames whose 
e queue. 



-out order* 
gevity for 
atical ly by 

referenced 
e same when 
aced on a 
ly searches 
ose status 

status has 



To prevent too much time 
as thrashing . a task 
implemented. At predeter 
compares the number ot 
paging requirements again 
and tow paging and re 
paging and reclaiming 
interval* one of the 
disabled. If more paging 
during the next interv 
reactivated. 



spent in paging* a condition known 

disabling algorithm is periodically 

mined intervals* the paging routine 

Read I/O operations generated by 

st an installation dependent high 

clamation thresholds. If too much 

has been done during the last 

lower priority active tasks is 

and reclaiming should be allowed 

al 9 a previously disabled task is 



Daf»Ded-Horkinq- Set (DWS) - The DWS algorithm has two parameters. 
T» the working set pa^ameter* and M* a multipler less than 
1. The working set algorithm is itself a special case of 
OWS in which M-1. This algorithm functions as follows! 
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o Any page not referenced within the preceding T 
program/task execution time is removed from memory. 

At the time of a page interrupt* if the time since the 
last reference to the least recently used page in memory 
is greater than M X T (M less than 1)* then replace the 
least recently used page by the new page* otherwise 
increase the number of allocated page frames by one. 



Page-Fault- Freq u enc y (PFF) 

since the last page int 
task/program is less than 
to the task from the fr 
frames free* deactivate a 
If the time since the las 
free all page frames 
task/program since the la 
these now free frames (if 
are no frames freed in t 
manner as if the time sin 



If the program's execution time 
err up t by the current ly interrupted 

T* assign an additional page frame 
ee page pool. If there are no page 

task* and free its page frames, 
t page interrupt is greater than T* 
not used by the interrupted 
St page interrupt and assign one of 

any) to the new page* If there 
his way* obtain a frame in the same 
ce the interrupt was lass than T. 



2*2 PA&INQ ALgPRITH^I'S EFF£CTIV£NSS§ 



As a general rule* it can be said that those algorithms 

which allow the space occupied by a program to vary (e.g.* PFF* 

OWS) do better than those operating with a fixed number of page 
frames allocated (e.g.* FIFO* LRU). 

When page replacement algorithms were first used for memory 
management* they were applied globally across the -memory. This 
means* whenever a replacement decision must be made* the 
replacement algorithm is applied to ait pages in memory* 
irrespective of the task/program to which they belong (e.g.* 
Muttics, CP-67* IBM 0S-VS2/1). This kind of memory management 
can lead to severe performance degradation. In fact* every 
global replacement algorithm may eventually lead to an unduly 
high page fault frequency since there is no way to guarantee that 
a task has been assigned enough page frames to run efficiently. 

If a program's page references were randomly distributed 
over all pages according to a uniform distribution* it would not 
matter what page is chosen for replacement. The page fault 
frequency would only depend on the number of all ocated page 
frames. However* programs tend to reference pages unequally* 
they tend to cluster references to certain pages in short time 
intervals. This property is exhibited to a varying degree by all 
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2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 
2.2 PAGING ALGORITHM'S EFFECTIVENESS 



practical programs and commoni y known as 'locality'. 

The Working-Set model of program behavior is based on the 
assumption that practical programs behave according to the 
•locality' principle and takes into account the varying memory 
requirements. Those pages are kept in memory that have been 
accessed during the last T references. The performance of the MS 
algorithm still depends on the corre c t choice of the w orking s et 
OargH^ter T. a strict implementation would require a setting of 
a flag at this point; that is, an indication that the 
corresponding page frame can be used for a different page of any 
task. Another problem is to detect the exact time when a page 
has not been referenced during the last T msec. Hence, it 
appears to be rather expensive t^ implement the WS algorithm in 
its pure form. 

Correct choice of the working set parameter requires future 
knowledge of a program's behavior which is impossible to do in a 
practical implementation. We require an adaof ive replacement 
algorithm which is largely independent of program behavior and 
input data, and is simple to implement* Page-Fault-Frequency 
(PFF) algorithm satisfies the above requirements. 

PFF memory management pol icy uses the page fault frequency 
(the frequency of those instances at which an executing program 
requires a page that is not in main memory) as an adaptive 
parameter to control the decision process of the replacement 
algorithm. Since the page fault frequency reflects the actual 
memory requirements of a program at execution time, the PFF 
algorithm can be applied to arbitrary programs without prior 
knowledge about program behavior. 

There is one difficulty with both the WS and PFF algorithms 
which up till now has not been mentioned. Occasionally during 
the execution of a program, a sudden change of locality will 
occur, e.g., when a large subroutine is called or between 
different phases of a compiler. The problem is that when such a 
change of locality happens, a time interval must elapse before 
the pages belonging to the old locality are completely flushed. 
In the meantime, a number of pages belonging to the new locality 
have been brought into memory. This peaking behavior is also a 
characteristic of the Multics and 0S-VS2/1 algorithms which under 
some circumstances would tend to steal excessive number of pages 
from other tasks when locality changes. PFF is the worst 
offender in this regard, since it would be far slower to flush 
the pages oe longing to the old locality than would WS. The extra 
page-frames used to satisfy the peak demand must either be taken 
from a pool of free pages, or are frames belonging to another 
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task. In the latter case, it may even be necessary to deactivate 
a task/job to satisfy the peak demand. The DWS algorithm 
corrects the peaking behavior of WS. 



2.3 IPLOS' PAGING CONS XPERAT^ON? 



IPLOS' Page Management is b.a 
reasons) 



for the fol lowing 



PFF is an efficient algorithm In execution time, control table 
size and minimizes memory space-time products. 

Memory is allocated according to the dynamically changing 
memory requirements of a program. 

No prior knowledge of program behavior is required and it can 
be applied to programs of different types and sizes. 

Using a PFF algorithm in a multiprogramming environment, the 
system scheduler has control over the efficiency and memory 
requirements of all tasks/ jobs. 



requirements extensions are ro 



To statlsfy IPLOS' 
in the following areass 

o Compensate for the peaking behavior during changes of locality 
by adjusting ageing rate according to page-fault -frequency . 

o PFF is a program/task local page replacement algorithm. IPLOS 
is designed to permit sharing of code and data among tasks of 
a Job and between separate Jobs. The 'global* usage pattern 
requires that shared pages be removed from memory according to 
a 'global' policy. Its implementation should be such that the 
global policy only applies to shared pages without 
interference with the prograra/tasK local management of its 
private pages. 

o PFF only frees pages while a page fault is being serviced. A 
compute bound program might go without a page interrupt for 
long time intervals, while some pages could leave its 
working-set and should be removed from memory. 



1 
2 
3 
t* 
5 
6 
7 
8 
9 
10 
11 
12 
13 
Ik 
15 
16 
17 
18 
19 
20 
21 
22 
23 
Zk 
25 
26 
27 
28 
29 
30 
31 
32 
33 
3<f 
35 
36 
37 
38 
39 
ffO 
41 
kZ 
kZ 
kk 
k5 
kb 
WJ 
if8 



NCR/CDC PRIVATE REV 6/23/75 



NCR/CDC PRIVATE REV 06/23/75 



ADVANC£>J SYSTEMS LABORATORY 
IPLOS GjS - Storage Management 



CHQJQi* 



2-7 
75/06/26 



2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 
Z.k IPLOS' MEMORY MANAGEMENT ENVIRONMENT 



ADVANCED SYSTEMS LABORATORY 
IPLOS GOS - Storage Management 



CH070U 



2-8 
75/06/26 



2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 
2.i». 1 JOB WORKING SET SWAP 



2.4 IP LOS' .MEMORY, MA NAQEM^NTENVI^RONMENT 



Memory management is performed within IPLOS* Storage System 
Hierarchy (for details see 3.0). Pages owned by Active JobSf and 
shared segmentSt are managed according to IPLOS* Paging 
Algorithm. Memory management* as applied to inactive/deferred 
JobSt is pre-empt /resume strategy on a JOB ^not Task) basis. 
Similarly* Page_Control maintains Job Working-Sets based on the 
assumption that the contained tasks' work is closely related 
witt»in the same areas of locality of the virtual address space. 
Not closely related 'work' should be performed by separate jobs. 
A Job can easily submit other ]obst share segments/files/private 
disk-packst etc.* and exchange messages/signals. A submited ] ob 
is scheduled independently* according to its own resource 
requirements. 

A running Job is delineated by a Segment_Descriptor_Table 
defined Address Space and entries within various system tables* 
i.e.*t 

o System Monitor entries 

Running_Job_Dr d ina l_Tab I e_Ent r y 

- Control.Point (s) 

- Signal Buffer(s) 

- Timing.Signal Selection(s) 

- Etc. 

o Segment_Contro I entries 

- Physical File Descriptors 

- Active Segment Control Tables 

- Pool_File Allocation Map<s) 

- Etc. 



^•'f.l JOB WORKING SET SWAP 



Within a Job several tasks can be simultaneously executed by 
the multiprocessing system controlled processors. Periodicly* 
when a Job's tasks used a certain amount of system resources (CPU 
time* memory space* channel time* etc.) the Job Scheduler 
instructs Segment_Control * via System Monitor* to inactivate and 
swap to a Swap-Files 
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o All private pages in the Job's Working-Set. 

All currently used execute and globally read only pages. 

(For a detailed description of Working-Set-Swap conditions* see 
Chapter 9* 2.10.1.1.3). 

2.^.2 JOB SWAP 



An inactive Job might be further 
following reasons! 



•deferred' 



for the 



o Onet of its tasks goes into a 'long wait' (i.e.* waits for 
terminal input* new tape/disk to be assigned or queues for 
the exclusive use of an interlocked file/segment) and all 
the other tasks are also waiting. 



o Used its share of system resources for the 
•schedule cycle' in the Running Job Mix. 



current 



o Too many running Jobs in inactive state (inactive Jobs tie 
down locked memory by their respective entries in system 
tables). 

o Etc. 

On a Defer_Job request* Overseer and Segment Control 
transfer to the Swap_File an Inactive Job's ownedi 

o Content of entries in System Monitor Tables. 

o Private Physical File Descriptors and Segment Control 
Tables. Shared Physical File Descriptors and Segment 
Control Tables are 'aged' from system tables and 
eventually removed by Segment Control to the 

one-per-system Shared.Oescriptors^Catalog. 

Segment ^Control requests the a I location of contiguous space 
on rotating* direct access mass storage so that a swap operation 
can be streamed with minimal movement of the recording heads. 
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Page Control is activated by a signal. The following can 
cause an activation signalt 

o Task services* on. an Advice* Lock, etc. request. 

o System Monitor, following a Page_Tabl e_Search_Rithout_Find 
page interrupt. 

o System Monitor, on a Memory Mai function interrupt. 

o Job-Scheduler, to instruct re-evaluation of a Job's 
Horking-Set and initiate possible stealing of inactive pages. 

o System Overseer, to initiate page stealing from a Job which 
has not had a page Interrupt for a certain time interval. 



2.5.1 SYSTEM MONITOR'S RESPONSIBILITIES 



The functions and parameters supported by System Monitor for 
Page Control consists oft 

o TET - Task_Execution_Time. CPU time used by a task, 
normalized to PC time, is maintained within its 

Control.Point. 

o LPIT - Last_Page_Interrupt_Time. On a page interrupt System 
Monitor calculates the approximate sum of the Job's 
Task_Execution_Times and records it as LPIT in the 
Runnin9_Job.0rdinal.Tab I e (RJOT). 

o PATT - Page.Age_Tick.Time. A parameter set by Job Scheduler 
in RJOT, determines the aging-rate of pages belonging to a 
Job's Working Set. 

On a Page Interrupt Page.Interrupt.Requast.Processor is 
activated within System Monitor. It performs the following 
actions! 

o Sums the Task.Execution.Times (STET). Tasks be I onging to the 
same Job could be running in parallel on other processors and 
only the last recorded TET's can be obtained. (The other 
processors would have to be interrupted and interrogated by a 
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signal tor exact values.) 

o Obtains LPIT from RJOT. 

o Cal culates Age.Interva l.lncrement (All)t 

All = <ST£T-LPIT)/PATT 

Calculates Page.Faul t.Frequency (PFF) t 

PFF = 1111/(STET-LPIT msec) page interrupt/sec 

Records STET as LPIT in RJOT. 

o Sends a signal to Page.Control which contains! 

o Control Point Identifier 

o Page Identifier 

o All (rounded) 

o PFF 

2.5.2 PAGE QUEUES 



Page Control maintains several page frame queues according 
to usage and status. These are the following! 

Job Working Set Queues . ; Page frames belonging to a Job are 
maintained in approximate LRU order (see Scan below). 

o Shared Page Queue . When a task interrupts to a page within a 
shared segment it is counted as being part of the interrupted 
Jobs working set. After being used for a certain time period 
it's valid and used bits are cleared, it is taken from the 
Job.WS and placed into the Shared Page Queue. 

o Fcge Pa ge Que ues. When a page is removed from \h^ active 
queues its page- frame is placed into one of the Free Page 
Queues. Any page which has not been modified is linked to the 
Available.Frea Queue, any page which has been modified is 
linked to"the Modi fied.Free Queue. Modified pages must be 
written to mass storage before the page frame can be used. 

Whenever a page is 'stolen' from a Job's Working Set or the 
Shared Page Queue, its valid bit is reset and the page Is linked 
to the appropriate ^ree Page Queue. 
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When a free page Is required to satisfy a page interrupt* 
Page— Control always tries to take a page frame first from the 
Avaitab le_Free_Queue. When the number of entries in the 

Avail ab I e_Fr ee_Glueue drops below some threshold* pages in the 
Modif ied_Free_(lueue are rewritten to their respective home 
positions on Mass Storage. Tnus» the write operation does not 
have to be performed while some task is waiting for the page. 

Before a page-frame can be real located* all processor's Map 
Buffer entries pointing to the contained page must be cleared. 
C^che Buffer en triest corresponding to page frames in the Free 

Queues* also havg tg t?g purggd if rgrrl?yal--l£9ff! tii.&Jla£l2S-as — !^ 

Real Memory Address (RMA) and not System Virtual Addres s (S VA ) . 
A processor always checks its Map Buffer before the Cache Buffer 
is accessed. Since no entry can correspond in the Map to a page 

not in memory, there is no Conflict u ntil an ?tfA or RMA is. 

reused . An RMA is immediately reused when a page frame is 
allocated to a new page. Active Segment Identifiers are only 
reused infrequently, and then all Cache Maps are cleared (See 
ASID management in ^.0 below). 

Page Control time stamps the page when it is placed into 
either free queues. All processors are periodically interrupted* 
the respective maps cleared by System Monitor and the time 
recorded. Page_Control compares the page- frame's time-stamp to 
the last Buf fer_F lush_Time-s (there could be several 

processors!) and if it is older than the least recent one the 
page frame can be reused. Otherwise* Page_Control requests 
System Monitor to have the buffers cleared of entries 
corresponding to the current Free Queue's pages. On return from 
System Monitor Page_Control can now assume that all free page 
frames are available for reuse. Frequency of Bufter_FI ush.Time 
depends on paging_rat€/Minimum_Free_Queue_Size ratio* thus* the 
scheduler can make the CPU versus idle-memory overhead tradeoff 
(for details see RepI enish_Free_Queue operation in A.O below). 

Page Table locations corresponding to Free_Queue entries are 
only cleared on actual reassignment of a page frame* e.g.* ]ust 
before a page is read from mass-storage or when a page is set to 
alt zeroes. Page.Control always looks first in the Page Table 
when a page interrupt is being serviced and retrieves a still 
useable entry from the Free^Qjeues or Shared_Queues« 
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2.5.3 USED BIT SCAN ROUTINE (SCAN) 



In order to determine the recency of use of a Job's pages 
and to take away from it any pages which are not being used* the 
used bits of a I I pages which belong to the Job and have their 
valid bit set are examined (at times indicated below). The Scan 
routine's input parameters are the followingt 

o All (from Page_Interrupt_RP) 
o Age_Interval_Cei ling (AIC) 
o Age_Interval_Floor (AIF) 

AIC and AIF are obtained by Page Control from a static table 

(Job Scheduler can change it according to global scheduling 

consideration, see 2.5.6 and 5.0 below)* called 

Unused_Age_Interval_Table* which is maintained by Job^Scheduler. 
It relates PFF to AIC/AIF. 

Scan performs the following actions! 

o Use Bit O n - The page has been used recently. The used 
bit is turned off and the Age_Count field set to zero 
within the corresponding Meraory_Map entry. 

o Use Bit Oft - Age^Count is incremented by All. The 
magnitude of the A'ge^Count , since the use_bit has been 
off* determines the specific actions 

d. Age_Count >. AIC 

The page has been . unused for more than AIC time 
interval* thus* it is no longer considered as 
belonging to the Job's Working^Set. It is removed 
from the Working^Set by having its valid_bit turned 
off and being linked to the Free_Frarae_Queue. It's 
page table entry is only deleted (set to all zeroes) 
when the page frame is actually reused. If the page 
is re-accessed before the page.frame is reused* a mass 
storage read operation is avoided. 

b. AIF < Age_Count < AIC 

The page has been unused long enough to be eligible to 
be taken from the J ob*s Working Set and its page frame 
is reused by a new page of the Jobt if required* 
During the scan process* the pa^s are chained into an 
approximate LRU list* the one with the highest 
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2.0 PAGED MEMORY AND SCHEDULING IMPLICATIONS 
2. 5. it PAGING ALGORITHM 



Age.Count at the head of the list. 

c. Age_Count < AIF 

The page has not been unused long enough and may not 
be taken from the job. Once a page is given to a jobt 
it is protected for at least the AIF time interval. 

2.5.^ PAGING ALGORITHM 

IPLOS' Paging Algorithm is based on PFF with extensions from 
DWS. System Monitor's P age_In t err up t_RP calculates 

Page_Faul t_Frequency and Age_Interval increment. PFF is used by 
Page_Control to obtain values for Age_Interva l_Cei I ing and 
Age_Interva l_FI oor from the Unused_Age_Interval_Tabl e. 

The following sets of actions comprise the algorithm! 

1. Compare AIC to the Age_Count of the Jobs LRU paget 

a. Age_Count > AlCt 

o TaKe a page from the Free_Queue 

o Initiate Page_Pull Sequence. 

o If no page on Free^Queuet use job's LRU page and clear 

processor maps accordingly, 
o Place LRU page on Free_Queue when not used, 
o Exit to Step (2). 

b. AIF < Age_Count < AIC i 

o Take a page from the Free_Queue. 
o Initiate Page_Pull Sequence. 
o Exit to Step (2). 

* If there is no page on the Free.dueuei 

o Take LRU page. 

o Clear Processor Maps. 

o Initiate Page.PuI I Sequence. 

o Exit to Step (21 • 

c. Age_Count < AIFI 

o Take Page from Free^Queues. 
o Initiate Pago.Pull Sequence. 
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Exit to Step (2). 

- If there is no page on the Free^Queues and All > 1? 

o Scan jobs WorkingJSet. 

o Set All = 

o Repeat Step (1). 

When All is zero and there are no pages on the 

Free_Queuest 

o Reschedule processing of this page interrupt, 
o Schedule Replenish_Free_Queue Operation. 

If the Free_Queue is successfully refilled) the page 
interrupt is processed again) otherwise Job Scheduler is 
aQtitJgdt. 

2. If All > 1 Scan job's Working Set and Exit to Step (3>. 

3. Change Control -Point_Status when page becomes 
available. 

2.5.5 SHARED PAGE MANAGEMENT 



When a task i 
being part of the con 
within the Working S 
the Act ive_Age_Cou 

Used_Bit_Scan_Routine 
Address Space. After 
the Active_Age_Limit 
it is taken from the 
Shared_Paged_Queue. 
placed/replaced into 
Address Space and th 
to Working_Set of the 
amount of real memo 
shared pages are move 
assign a shared page' 



nterrupts to a shared page it is 
taining job's Working Set. Its 
et is maintained by Page Control 
nt • This is updated 

whenever it is activated for the 
being used for a certain length 
period) its valid and used bits a 
job's Working Set and placed 
On a suDsequent page interrupt) 
the Working Set of the interrupt 
US) an active page is moved from 

jobs sharing it. Jobs are charg 
ry Utilized by their Working Sets 
d around periodically) it is now 
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While a shared page is within an Address Space's Working 
Set) it is aged by the Scan routine just like a non-shared one) 
however) the Page Fault Frequency used for retrieving its 
respective AIC/AIF values from the Unused.Age^Interval^Tab le Is a 
function of both the containing Job's PFF and the System's 
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Shared^PFF. Shared_PFF is maintained by System Monitor. It is 
the average PFF of page interrupts to shared pages vs. total CPU 
time accumulated by the currently active jobs. The 

•eviction-pate* of shared pages from real memory is thus a 
function of the global usage pattern. 

, Active_Age_Count pf shared pages within the Working Set of 
I/O bound Jobs might never reach the Active_Age_Limi t . Page 
Thrashing Monitor in System Monitor's Overseer compensates for 
this anomaly by activating SCAN whenever the Shared_PFF fal Is 
below a Job Scheduler set minimum threshold. SCAN attempts to 
take Shared pages from the jobs' Working Sets* and place them 
into the Shared_Page_Queue» until Shared_PFF rises above the 
prescribed threshold. 



2.5.6 PAGING STRATEGY CONSIDERATIONS 



IPLOS' Paging 
Unreferenced pages ar 
the e lapse of a ti 
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Strategy is a combination of PFF and DWS. 
e automatically 'evicted' from memory after 
me-interval > Age_Interval_Cei I ing (AIC). An 

indicates how long a page has not been 
similar to Tf the Working-Set Parameter, 
igh memory becomes under-utilized and the 
I limited. A too tow vaiue for AIC can 
pages to be used soon could be removed from 
mediately reloaded. Age_Interval _Floor sets 

unreferenced page's right to stay in memory 
high probability that it will be referenced 
erval • When a job needs a page, one with an 
IC is a good candidate for replacement, 
ges between AIC and AIF should only be used 



o A program is in steady state and new code or data pages are 
only required occasionally. 

o A program is moving to a different locality (e.g.* 
Working-Set) and the old pages should be rapidly flushed from 
memory. 

The 'instantaneous' page-fault- frequency is used by IPLOS 
Paging Algorithm to differentiate between the above conditions. 
Values of AIC and AIF are constant for an exact implementation of 
DWS. PFF does not take into consideration the, relative age of 
unreferenced pages. In IPLOS AIC and AIF are a function of the 
Page^P'autt-.Frequency* and chosen in such a way » as to maintain 
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the PFF at an optimum level. 

Optimum PFF is configuration and usage pattern dependent. 
Maximum paging rate of a system is influenced byS 

o Memory size, e.g., multiprogramming level. 

o I/O Channel's! Data Rate 
Number 
Memory Access Interference 

o Number of simultaneous! Transfers 

Seek-over I aps 

o CPU overhead incurred in Page and Block Control* 

Differing patterns of use (i.e., transaction, interactive, 
batch) require optimization for! 

o Minimum response time to transactions, 
o Job thru' put. 
o CPU utilization. 

Generally it is possible to trade-off CPU overhead for 
response time; however, this can only be achieved dynamical Iv 
within a continuously balanced paging system. 

On Figure 2-1 'possible' Age_Ceiling/F 1 oor curves are shown 
as a function of PFF. An optimum PFF of 20 is assumed. At high 
paging rates pages are protected for shorter time periods and 
become candidates for reassignment earlier. Since the algorithm 
tries to 'steal' pages from the page- fault ing job first, non 
regular 'thrashing' programs are naturally limited in their rate 
of expansion. System Overseer periodicly examines individual 
RJOT entries which contain! 

o PFCI - Page_Interrupt_Count_Increment. Number of page faults 
since last examination. 

o PIAS - PICI_Accumulation_Start time in Job execution time. 

From the above parameters System Overseer deducts if the 
job's paging rate is below the desired minimum and instructs Page 
Control to activate Scan. 

Age_Interval vs. PFF curves should be constructed 
empirically by observing system behavior during a set of 
benchmarks. Job Scheduler maintains the Unused_Age_Interval_List 
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which contains tabulated values of AIF and AIL vs. PFF. PATTt 
Page_Age_TicK_Time» Is also set by Job-Scheduler; thusf it can 
control how often should a fob's Working-Set be aged. Accuracy 
of HS^Size evaluation should be weighed against the overhead of 
the more frequent evaluation. 
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Age-Ceiling /Floor vs. PFF 
Figure 2-1 
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3.0 D£SIGN CONSIDERATIONS 

3.1 STORAGE HIERARCHY 



3.0 J2£5 



The following topics had such a significant influence on the 
general design of the Storage System that are Judged sufficiently 
important to justify their appearance in this GDS. 



3.1 



B&BOtil 



As computing grows increasingly more data oriented* the 
speed of data handling^ and .especially of storage functions^ 
becomes the limiting factor in the overall performance of modern 
computers. Storage systems typical I y use several technologies* 
which are linked together with the objective of effectively 
utilizing the advantages of each technology (high speed* low 
cost). 



The early memo 
the speed/cost 

electro-mechanical s 
slow access times of 
a significant degra 
number of reference 
compensate for such d 
to contain nearly com 
In addition* the c 
level disK/ drum/ elect 
due to the high cos 
liKe devices. To dat 
in the main memory sy 
different electronic* 
hav€^ been integrated 



ry hierarchy designs attempted to integrate 
characteristics of electronic and 

torage with rather disastrous result. The 
drums* and/or fixed head disKs* resulted in 
dat ion of the CPU performance when a large 
s to auxiliary storage were made. To 

isparity in access time* the main memory had 
plete programs and their worKing storage, 
ost/performance characteristics of the three 
ronic-memory hierarchy has been rather poor 
t* low capacity and slow access time of drum 
e* hierarchy has been used successfully only 
stem where the speed/cost characteristics of 
and not mechanical* storage technologies 
(e.g.* bipolar cache vs MOS memory). 



There are a number of technologies being currently pursued 
that can lead to storage devices falling between the traditional 
high cost* high performance main storage and lower cost* low 
performance electo-mechanlcal storage* Many of these 

intermediate storage approaches have been ^ successfully 

demonstrated and the most promising ones shuld be in full 
production before the first IPL system is delivered. These new 
devices are of electronic nature with the resultant 
cost /pert ormance and reliability benefits. Their development 
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completely alters the feasability and desirability 
automatically managed memory hierarchies. 



of 



IPL*s Storage System will include the capability of managing 
and functioning within a three level storage hierarchy (e.g.* 
mass-storage* paging storage and real memory). The design of 
this feature is being influenced by the following main 
object ivesi 

o A user should be able to control where in the Storage 
Hierarchy his data is. 

o Elements of the Storage Hierarchy should be 

managed/control led similarly to any other mass storage 
device. 



o Storage Hierarchy's Control Software should 

removed/included at System Generation as an option. 



be 



The next release of this GDS will include a detailed 
description of the Paging Storage Management /Contro I algorithms. 
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3,0 DESIGN CONSIDERATIONS 
3.2 SHARING IMPLICATIONS 



3.2 MARIN& IHPLI£AmMS 



A major des 
the sharing of 
segments. IPL 
Storage System s 
of an execute 
straight forward 
Segment ' Descrip 
Table for the re 
transport them t 



ign objective of the IPL 
data structures with 

hardware's Virutal Me 
upported data structures 
read-execute or read-oni 

manner. The only requi 
tor within the accessing 
spective segment* manage 
o/from mass storage. 



system is to provide for 
in directly addressable 
mory Mechanism and the 

accomplish the sharing 
y segment in a relatively 
rement is t o establish a 

job's Segment Descriptor 

its pages in memory and 



However* support for concurrent* in place* updating and 
simultaneous reading of arbitrary data structures places some 
additional requirements on the Storage System. These are the 
fol lowingi 



1) Provide for the locking 
exclusive update. 



of arbitrary data structures for 



2) Prevent concurrent update of intei — locked data structures. 

3) Permit simultaneous* shared reading of data structures* 
inter^locked for exclusive update* in their original* 
non-modified form. 



k) Provide queuing logic 
conflicting demands. 



to permit proper sequencing of 



5) Detect an existing deadlock. 

6) Provide for the automatic roll -back of the effect of a set of 
updates to remove a deadlock or correct a system or user 
error. 

7) Provide the above facilities for controlled* simultaneous 
access to data structures within a set of segments. 

8) Provide the above facilities without excessive overhead and 
with minimum penalty to those users who do not subscribe to 
their use. 

Requirements CD* (2)* (3)* (6)* and (8) naturally follow 
from the basic structure of the Storage System. To meet 
requirements (^)* (5)* and (7> additional code and table space 
has to be utilized within the Working Set of those jobs which 
subscribe to this service* 
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The relevant requests* their sharing and usage options plus 
a detailed description of the individual request's internal 
operation is described in 6.1.2.^ and 6.1. ^f. 
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3.0 DESIGN CONSIDERATIONS 
3.3 RuCOVERY AND RESTART 

2 
3 
Storage Management is responsible for managing the residency h 

of a }ob*s code* working storage and data segment's pages/blocKs 5 

within IPL's Storage Hierarchy. It performs the respective 6 

functions automatical ly» without its users explicit Knowledget 7 

and thus it must be also responsible for guaranteeing the 8 

validity of the information entrusted to its care. Internal 9 

design of the Storage Management must reflect this requirement* 10 
within the cost/ performance constraints (e.g.* real memory and 11 
processing time overheads* additional external storage space 12 
usedt etc.) imposed on IPLOS. 13 

1^ 

Storage Management will have the following capabilities in 15 

support of the system resiliency requlrementst 16 

17 

o Integrity of a Deferred Job's code* working storage and of 18 

data segments local to It's Address Space are guaranteed 19 

over System Restarts. 20 

21 

o In case of a system power outage* it will dump sufficient 22 

number of its tables and data pages to provide fori 23 

Zk 
Identifying the afflicted jobs and pages/blocks of 25 
shared data segments. 26 

27 
Memory resident pages of 'critical* data segments 28 
(c.f.t 6.1.2.1.1 Usage (Critical) parameter) are 29 
saved. 30 

31 

o A Recovery Subsystem is provided which attempts to salvage 32 

the Storage System's tables from a System Dump and asslts 33 

other elements of IPLOS with their respective Zk 

recovery/restart responslbl I ities after a system outage. 35 
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«».0 STRUCTURE 1 

2 

3 

k 

5 

6 

7 

This section is being continuously revised and contains 8 

implementation details. An up-to-date copy can be obtained by 9 

listing the file R7, under User Number MAD, within ASL's SES 10 

System. 11 
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5»0 JQB SPM ^QUi,£R 



To be supplied 
System is completed* 



when the internal design of the Storage 
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6.0 US££-ItiILfi£fl.IIt-^il-EACIkILl£S 



This section contains descriptions of the Storage System 
requests. These are grouped into the following categories! 

o Segment Control Requests! 

Initiate/terminate Segments 

- Manipulate Segment Descriptor Table Entries 

- Control Segment Attributes 
Control sharing of Segments 

o Page Control Requests! 

Predict memory usage 
Manage memory 

o System Interface Requests! 

- Assist other elements of the Operating System 

Define tables/parameters to be used by the Storage 
System procedures 



The following conventions are 
descriptions! 



used 



in 



the 



request 



o Requests follow standard operating system convent ions t as 
specified in Structure Overview section of this GDS 

o Requests are specified as SHL macroes 

o On return from the Storage.System_Request_Processors» the 
Request.Status parameter is always immediately available. 

- If the request was acceptedt the requestor can 
determine if it was completed or ] ust initiated 

If the request was rejectedt the requestor can 
determine the reasons 

Fields in the request status provide information about the 
conditions of completion or initiation* specify parameter 
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errors or reasons for rejection. Examples; No available 
memory t installation threshold has been reached^ tables 
are f ul I « etc. 

o Option field specifies variants of a standard request and* 
in case of error conditions* provide instructions for 
alternate action. 
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6.0 USER INTERFACE AND FACILITIES 

6.1.1 SEGMENT CONTROL AND ACCESS RIGHT CONVENTIONS 



NI£Qi,^£QU£STS 



Segment Control Requests are used to create* manipulate and 
control Storage Spaces which are made addressable via IPL's 
Virtual Memory Mechanism. They are grouped into the folloMing 
categories! 

A. Segment Creation/Termination requests! 

o SC#Ini tiate^Segment 
o SC#Terminate_Segmeht 
o SC#Map_In 
o SC#Map_Out 

B. Segment Descriptor Table Manipulation requests! 

o SC#Expand_SOT 

o SC#Contract_SDT 

o SC#Reserve.SDT_Entry 

o SC#Return_SDT_Entry 

o SC#Change_Access 

C. Segment Attribute manipulation requests! 

o SC#Set_Max_Length 
o SC#Expand_Segment 
o SCiContract^Segment 
o SC#Truncate_Segment 
o SC#Release_PVA 
o SC#Status_Segment 

0. Segment sharing requests! 



SC#MaKe.Global 

SC«MaHe.Local 

SC#Cre ate^Transact ion_Li st 

SC#Remove_Transaction_List 

SC#Register_Transact ion^Set 

SC#Start_Transaction 

SC#Exit_Transaction_Set 

SC#LocK_PVA_Range 
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6.1.1 SEGMENT CONTROL AND ACCESS RIGHT CONVENTIONS 



The following objectives influenced the design of the 
segment access and ownership control procedures supported by 
Segment Control! 

o A user's control over hardware features should only be 
limited by system integrity and privacy considerations. 

o Provide for the controlled sharing of directly addressed 
segments* within and among separate Address SpacesV 
without the requirement that only permanently cataloged 
Direct Segments can be shared globally* 

o Permit the Operating System provided "access monitor* 
procedures like Program* Job and Data Management to 
exercise control over their specific areas of 
responsibility without preventing a user from explicitly 
control ling his own environment. 

o Use only a minimum of software and system table space to 
achieve the above objectives. 



6.1il.l 



Program and Job Management procedures create active entities 
like 

o Address Spaces * Jobs 

o Control Points - Tasks* Programs 

whose direct access to each other and to elements of the virtual 
Address Space is controlled by hardware. Segment Descriptor 
Tables define a Job's Address Space* ring/key combinations define 
task/program accessable segments within this Address Space. 



T 
and i 
contro 
their 
contro 
additi 
Contro 
Descri 
Attrib 



he key/lock mec 
dentify a set 
I ted/used by ,th 
Segment Descri 
I information i 
on* to the h 
l_Attributes a 
ptor's Type f 
utes can be 



hanism is used by Segment Control to define 
of related segments (e.g.* owned and/ or 
e same entity within one Address Space) via 
ptors. A limited set of ownership and usage 
s maintained within Segment Descriptors* in 
ardware enforced access control data. These 
re encoded into the respective Segment 
ield tSee 4.0 for details). The Contral 
specified by the SC#Initiate_Segment and 
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6.0 USER INTERFACE AND FACILITIES 
6.1.1.1 Segment Control Right Conventions 



SC#Change_Access requests (c.f .t 6.1.2.1.1 and b.l. 2.2.5). 

A Segment's Control_Attribute can be at one ot the following 
Contro l_Levelsl 

o Owner 
o Pass 
o Copy 
o Use 

Ownert Owner Attribute can be given to an entity over a 
Segment Descriptor (SD) in the following casest 



1. 
2. 



It is the initial Segment Descriptor Table entry of 
the newly created segment by the entity. 

It is the File Access Procedure» as defined by the 
File Control Block of a Direct/Indirect Segment. 

It is the owner of the Direct /Indirect Segment* as 
recorded within its File Control Block. 



Requestor's Validation Level is 
Services . 



that 



of 



Task 



Owner of an SD (e.g.t the requestor's key matches that in^ 
the SD and it has Owner Attribute recorded within its Type 
Field) can change its access right fields or initiate a 
new SD with the following attributes! 

o Lower/higher access rights» 

o In any Address Space ♦ 

o With any Control Attributes 

Pass! Pass Attribute, with respect to a Segment Descriptor, 
can be given to an entity by its owner or another entity 
with Pass right. 

Pass right, with respect to a Segment Descriptor, enables 
an entity to change its access right fields or initiate a 
new SD with the following attributesi 

o Lower/higher access rights, 

o In the current Address Space, 

o With Pass, Copy or Use Attributes. 

Copy! Copy Attribute, with respect to a Segment Descriptor, 
enables an entity to change its access right fields or 
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initiate a new SD with the following attributes! 

o Lower or higher access rights, 

o With the same key/lock, 

o With Copy or Use Attribute. 

Use« Use Attribute, with respect to a Segment Descriptor, 
enables an entity to change its access right fields, or 
initiate a new SD with the following attributes! 

o Lower or same access rights, 
o With the same key/lock. 



6.1.1.2 Access Control Cpnver^t ^oris 



A Segment Descriptor's (for details see Model Independent 
IPL Processor/Memory GDS) Access_Control Fields are 

initialized/modified by Segment Control according to the set of 
conventions detailed below. 

A. The following restrictions apply when a requestor's 
Validation Level is that of Task Services or greater (e.g., 
the call is if from a higher, less capable ring); 



A Global_Pri vi leged segment can only 
within a System Job's Task Services. 



be created from 



B. 



o A segment can only be initiated with an Execute Attribute 
when its write ring (Rl) is greater or equal to that of 
the requestor's Validation Level. This restriction 
prevents a user from directly creating an executable 
segment which can execute within more privi leged rings. 

The following additional restrictions apply when a 
requestor's Validation Level is greater than that of Task 
Services? 



General Restrictions 

o No Segment with Execute 

Local_Privileged can be initiated. 



Attribute 



of 



No Segment with the Read Attribute of Binding 
Section can be initiated. This restriction prevents 
a user from directly creating inter segment linkages 
which might by-pass gated entry points into more 
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6.0 USER INTERFACE AND FACILITIES 
6,1.1.2 Access Control Conventions 



privileged rings. 

A segmenty initiated with execute attribute* 
inherits its Initiator's Global/Local Flags and 
key. This restriction permits Segment Control to 
maintain the intra Address Space isolation firewalls 
provided by the Key/Lock feature. 

A requestor's key must be the same as that within 
the Segment^Descriptor specified by a Storage System 
request when one of the following actions is 
requestedl 



Initiate a new SD per specified one* 
- Change its access control or 
attributes * 
Use it in arty Page Control requests. 



ownership 



o When an existing global segment is made accessible 
by a new Segment Descriptor and the requesting 
entity has no Owner rights than the new access 
attributes must be definable by the following 
transformation! 

Read/Write -> Execute/Read -> Execute 

The above rule prevents damaging a globally shared 
Read/Execute only segment 

2. When an existing file is made directly accessable as a 
Direct Segment the following fields of the 

Fi le_Control_Block <See section IVt Appendix A) might 
restrict access! 

o fapring - The initiated segment's write ring (Rl) 
and read ring (R2) must be the same as the 
fapring when a File_Access_Procedure is 
defind. 

o acclevel - must permit Segment Level access. 

o Write ring - defines the highest write ring (e.g.t 
Rl max). If it is Nu 1 1 1 and no FAP is 
defined* user specified ring is used* 

o Read ring - defines the highest read ring (e.g.« R2 
max). If it is Nul I t and no FAP is defined* 
user specified ring is used. 
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User Identifier - when this field is not that of the 
user initiating a new Segment Descriptor then 
its Control Attribute can be on I y of Use 
type. 
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6.0 U::>ER INTERFACE AND FACILITIES 
6.1.2.1.1 SC#INITIATE_SEGMENT 



6.1.2 REQUEST DESCRIPTIONS 



The following subsection contains a description of requests 
accepted by Segment ControU Segment Control requests generally 
execute serially with respect to the requestor. An exception is 
always noted within the individual request description. 

^ Request Status codes» which are set before returning from 
each request f and request processing are described in section 
6.1.3 and 6.1.^, respectively. 



6. 1. 2. 1 Segment ypjt^a 



These requests initiate/c 
Indirect* Temporary or Buff 
physical attributes are rec 
Segment_Control_Table. One- 

within Segment Descriptor TabI 
this segment has been init 
Table. Segment Descriptors 
control attributes of the 
used/enforced ownership attr 
assigned to the Segment on 
SCi?Initiate_Segment request le 
Control Table). The segment 
Record* while its descriptors 



reate or terminate/destroy Direct* 
er Segments. The created segment's 
orded within the one-per-segment 
oi — several Segment Descriptor (s)» 
es of those Address Spaces where 
iated* point to its Segment Control 
contain hardware enforced access 
segment and the Segment Control 
ibutes. A unique identifier is 
its creation (e.g.* when the first 
d to the building of its Segment 
is known by this 'name'* or Locator 
exist within the Storage System. 
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6.1.2.1.1 S C#INI TIATE gEGMENT 

The purpose of this request is to make an existing segment 
known by a new process segment number* or enable direct 
addressing of an existing file as a Direct Segment* or create a 
new Direct* Temporary* or Buffer Segment within a j ob" s segmented 
Address Space. 

The macro format is as followst 

SC#Initiate_Segment (Seg_No* Seg_Specifier* Control, Access* 
Job_Id* Usage, Scope* Attribute, Supervisor* Status) 

Seg_Noi (Input, Output) - The Seg_No parameter is a variable 
of "Cell type. It specifies either the Segment Number to 
be used for the initiated segment or, when it is set to 
Nil initially* a pointer to the newly allocated segment 
(with byte number ot zero and ring number set to the 
callers validation level) is returned. A non Nil Seg_No 
parameter must correspond to a segment number reserved by 
a previous SC#Reserve_SDT_Entry (c.f., 6.1.2.2.3) request 
or by the Reserve_Opt ion of an SC/^Terminate_ Segment (c.f.i 
6.1.2.2) request. 

Seg_Specif iert (Input) - The Seg_Specif ier parameter is a 
variable of union (Descriptor, Seg_PVA, FCB_Name, Fcbid) 
type. 

Descriptor parameter is a pointer variable of Locator 
type. A Physical^Fi le^Descriptor 's or 

Segment_Control_Tables's position within the 

one-per-system Physica l_Tab I es_Heap Segment is defined by 
that particular descriptor's Locator record (see ^.0 for 
details). 

Seg_PVA parameter is a pointer variable of ^Cel I type. It 
must specify a cell within an existing segment of the 
requestor's Address_Space. 

FCB_Narae parameter is a pointer variable of '*LNS_Name 
type. A Fi I e_Control_Block is defined as per the 
specified LNS_Name. 



Fcbid parameter is a 

Fi le_Control_Block_Identif ier type* 
defined Fi le_ControJ Bl ock. 



It 



variable of 
must specify a 
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The Seg_Speci f ier parameter is used to specify that I 
either 

1. A new Teraporary^Segment is to be created; 

o Descriptor = Nil is specified (the associated 
Pool_File is specified by the Attribute 

parameter) • 

ac 

2. An existing mass-storage file is to be made directly 
addressable as a Direct Segment; 

o A valid Descriptor is specified. 

Note i Only Task Services' procedures are permitted to 
use this form of the Seg_Specif ier parameter. 
(This is the standard method for initiating a 
Direct Segment by the File System and Program 
Management). 

3. An existing irect/Indirect/Temporary/Buf f er Segment 
is to be made accessible via a new segment number and 
access attributes; 

o Seg^PVA is specified. 

k. A new File_Control_Block (FOB) is to be defined, the 
corresponding temporary mass-storage file created and 
made directly addressable as a Direct Segment; 

o The new FCB's LNS_Name is specified. 

Note ! File System requests are used by the Storage 
System toi 

o Define and merge parameters into the FCB 

o Create a temporary mass-storage file as per 
the defined FCB. 

ai: 
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5. A file* specified by a Fi le_Contro l_B I ock_Identif ier 
(Fcbid), is to be created (when the FCB is not locked* 
e.g.y no corresponding file exists) and/or made 
directly addressable as a Direct Segment; 

o An Fcbid is specified. 

Note t File^System requests are used, by the Storage 
System! 

o To merge parameters into a non locked FCB 

o Create a temporary mass-storage file as per 
the defined FCB. 

An FM#Save_Fife requst can be used to convert a 
temporary file to a permanent file and record 
its attributes in the File Catalog of the 
appropriate Volume_Set. An FMffAttach_Fi le 

request retrieves a pemanent file and 
initializes the corresponding FCB so that a 
subsequent SC#Init iate_Segment request can make 
it directly addressable (for details, see 
Section V of this GDS) • 

Controls (Input) - The Control parameter is a variable of 
Seg_Control = (Owner, Pass, Copy, Use) type. It is used 
to specify the Control Rights of the entity identified by 
the key field of the Segment Descriptor created by this 
request. (See 6.1.1 for detailed specification of Segment 
Access and Control Right Rules). 

Accessx (Input, Optional) - The Access parameter is a 
variable of '*Access_Descriptor type. An Access_Descriptor 
record is defined by the folloing SWL structure! 

tyaa 

Access^Descriptor = r^c ord 
Rl t 0..15, "Hrite^Ring" 
R2 I 0. .15, "Read.Ring" 

By_Pass_Cache t Boolean, "True for cache bypass" 
Execute i (Not_Ei Execute, Local^Privi leged_Execute, 

6 lobal_Privi leged.Execute) 
Read « (Not_R, No_Key_Control_Read, Key_Control_Read, 

Binding_Section) 
Write I (Not_W, No_Key_Control.Hrite, Key^Control^Hrite) 
Key/Lock t 0..63, 
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Global_Flag i Booieant "True for global key/lock" 
Local_Flag t Boolean "True for local key/ I ock" 

The Initiated_Segment 's Segment_Descriptor Entry (for 
details see Mode l_Independent IPL Processor/ Memory GDS) is 
initialized by Segment Control according to the fields of 
the Access_Descriptor record and the access rules defined 
by 6,i.l. 

An Access = Nil parameter is assumed to specify that 
standard system default values are to be used. These are 
the f ol I owing! 

o Rl := Requestor's Val idation_Level • 

o R2 t= Rl? e.g. 9 both Rl and R2 ring numbers are set to 
the callers validation level. 

o By_Pass_Cache l= False* e.g.t the cache is pot 
by-passed (Segment Descriptor's VL field is set to 
10). 

o Execute i= Not_E » e.g.» the initiated segment is not 
executable {Segment Descriptor's XP field is set to 
00). 

o Read i= No_Key_Control » e.g.f reading of the initiated 
segment is not controlled by Key/Lock and reading is 
permitted (Segment Descriptor's RP field is set to 
10). 

o Write t= No_Key_Control f e.g.f writing of the initiated 
segment is not controlled by Key/Lock and it is 
permitted (Segment Descriptor's WP field is set to 
10). 

o Key/Lock i= Requestor's Key/Lock* e.g.f the initiated 
segment's Key /Lock becomes that of the initiator. 

o Global_Flag i= False* e. g. » no global lock. 

o LocaI_Flag «= Fa I set e«g.» no local lock. 

Job_Id t (Input » Optional) - The Job_Id parameter is an 
integer variable of Job_Identif ier type. The new Segment 
Descriptor is to be entered within the Segment Descriptor 
Table of the Address Space specified by this parameter. 
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Job_Id = Null is assumed to specify that the Job_Id is 
that of the requestor. 

Only System Job(s) are permitted to create Segment 
Descriptors directly within Segment Descriptor Tables of 
other Address Spaces (e.g.f with a Seg_No = Nil 
parameter). User and Subsystem Jobs must explicitly 
cooperate; 

o The target Address Space must explicitly reserve an 
entry within its own Segment Descriptor Table. 

o Notify the Address Space making this request. 

o The reserved Segment Descriptor's Seg_No is specified 
by the requestor in the SC#Initiate_Segment request. 

Usage t (Input» Optional) - The Usage parameter is a variable 
of Seg_Usage = Set of (Bt ockf Serialf Lockt Non-migrate* 
Critical, Reliable, Public, Buffer) type. It is used to 
specify the usage environment of a newly created segment. 

Block parameter specifies that pages within a block of the 
segment should always be returned together to external 
storage. File updating is thus guaranteed to take place 
on a block-by-block basis. (Note! A block's pages are 
always fetched as a unit). Overuse of this option can 
result in larger job Working Set size then otherwise since 
inactive pages of a block can not be removed individually 
from real memory. 

Serial parameter specifies that the segment is to be 
accessed serially. Storage System retrieves one more 
block then the one interrupted to and returns the previous 
block (when modified) to external storage thus bypassing 
the normal paging algorithm. The extra block's pages are 
only made valid In the page table when they are also 
interrupted to, therefore the 'circu lar_buf f er_scheme" 
(e.g.* of memory page_frames) can be repeated and the 
segment's blocks fetched ahead of use. 

Lock parameter specifies that the segment's pages should be 
locked into real memory immediately after retrieved from 
external storage. The locked down pages are bypassed by 
the paging algorithm, howeverf they are swappable when 
owned by an Address Space local segment. An SC#Advise_Out 
request can remove the lock and return them to external 
storage. It is used by Storage System to control its own 
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internally used segments. 

Non-migrate parameter specifies that the segment's pages 
should not be migrated to paging storage. Storage System 
migrates frequently used pages of a segment to/from fast 
paging storage (e.g.* Drum* Micro-Bit Memory, etc.) when 
available and specified to do so at System Deadstart or, 
on a job-to-job basis* by Job Scheduler (see 3.1 for 
details). 

Critical parameter specifies that the Segment's storage 
space should be immediately updated when one of its 
modified pages leaves a job's Working Set. This option 
guarantees regular updating of critical data bases even 
while its more frequenly used pages are migrated to paging 
storage. Careless use of this option can cause needless 
output transfers. 

Reliable parameter spcifies that page-frames within highly 

reliable zones of memory should only be allocated to pages 

of this segment. System or Subsystem Jobs are only 
permitted to use this option. 

Public parameter specifies that this segment might be 
accessed from several Address Spaces and thus its paging 
storage space must De subal located from a globally shared 
Pool File. 

Buffer parameter specifies that a newly created Temporary 
Segment is to be used as a Buffer Segment. This option is 
only accepted when the requestor's validation level is 
that of TasK Services. 

When $Seg_Usage CI is specified? the Storage System assumes 
that standard default conditions apply. These are the 
following! 



Pages are 
algorithm. 



treated individual ly by the paging 



No pre- fetching of blocks is performed. 

Pages are not locked into memory on initial access. 

Frequently used pages are migrated to/from paging 
storage. 

No automatic updating of storage space. 

NCR/COC PRIVATE REV 06/23/75 
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o Page^frames are allocated as available. 

o Job's Local Pool File is used for paging storage. 

o Newly created Transient Segments are non Buffer type. 

Scopei (Input) - The Scope parameter is a variable of 
Segm_Scope = (Local, Global, System, Default) type. It is 
used to specify the initial usage scope of a newly created 
segment, e.g., 

o It is to be used only within the creating 
Address^Space? 

o It is to be shared among Address Spaces? 

Local parameter specifies that the newly created segment is 
to be accessed within the creating Address Space (e.g., it 
is not shared initially among Address Spaces). A local 
Segment's Segment Control Table is immediately removed 
from memory to external storage whenever the containing 
Address Space assumes Deferred State. 



Global parameter specifes that the seg 
by several Address Spaces. A seg 
become Global when it was created 
attribute. When a segment is initiat 
in more than one Address_Space its Sc 
changed to Global. It can only be ma 
status by the SC#Make_Loca I request 
Segment Control Table of a Globa 
removed from memory to external stora 
known by any of the currently Running 



ment is to be shared 
ment's Scope can only 
with Usage (Public) 
ed (e.g., Made_known) 
ope is automatically 
de to revert to Local 
(c.f., 6.1.2. 4. 2). 
1 Segment can only be 
ge when it is not 
Jobs. 



System parameter specifies that a special global segment is 
to be created. A System Job can only initiate a segment 
with this attribute, its segment Control Table is 
permanently locked into real memory. Segments owned and 
used by the Storage System have this attribute. 

Default parameter must be specified when this request is 
used to re-initiate an already existing segment with a new 
segment number. 

Attribute! (Input, Optional) - The Attribute parameter is a 
variable of ''Attribute Descriptor type. It is used to 
specify the physical atributes of a new segment. An 
Attribute_Oescriptor record is .defined by the following 

NCR/CDC PRIVATE REV 06/23/75 
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SWL structure! 



lXJ2£ 



Attribute_Descrlptor = recq r< ^ 
Block_Size I integer* 
Max_Length I- integert 

Memory_Region t (Oetault* Arealy Area2» 
Pool^File S Fileld 
recend S 



Area7) 



BlocK.Slze parameter specifies the segment's block size in 
bytes* It must be 2**N multiple of the minimum page frame 
size (512 bytes). 

Max_Length parameter specifies the segment's size in 
bytes. It must be a multiple of BlocK^Size. Storage 
space is automa^ticaH y altocated* when referenced t up to 
and including this size. Segm_Length_Error On_Condition 
is raised within the erring Control_Point 's stacks when 
virtual memory is referenced beyond Max_Langth. No new 
storage space is assigned* unless the segment is a 
Stack_Segment. In this case* the following procedure Is 
f ol I oweds 

1) Error is not from ring of Task Services; 

o Dynamic Space Pointer (AO) is retrieved from the 
offending Contro l_Point 's Exhange Package. 

o AQ is set to Max.Length (e.g. * when I arger) • 

o An extra block or 102*f bytes (which ever is 
greater) worth of storage space is allocated to the 
segment, so that trap processing can be initiated. 

o Page Control is signalled within the 

Control _Point . Page Control will cause the 
Segm_Length_Error On^Condi tlon. 

2) Error from Task Services, Follow special System Error 
Recovery procedure (c.f.« 6.1.'>.l) 

Memory^Region parameter specifies the memory area to be 
used for allocating page.frames to this segment's pages. 
This parameter can only be set to Default (e.g.* 
specifying the default area) within User Jobs. System or 
Subsystem Jobs can request other memory areas. Storage 
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system is provided with the memory_area_ordinal vs. 
address range list on System Deadstart. 

Pool_File parameter specifies the Fileid of the file which 
should be used in place of the Job's Pool_File for paging 
storage. The user must have block level access to this 
file. When set to null, the default Pool File is used. 

When Attribute = Ni I is specified the Storage System 
assumes that standard default conditions apply. These are 
the fol lowingi 

o Max_Length 1= <System Default Value>, 

o Block_Size *= <Systera Default Value>, 

o Memory_Reglon i= <Default Area>, 

o Pool.File J= <Job's Pool.File). 

Supervisor! (Input, Optional) - The Supervisor parameter is a 
variable of ^Segra_Super visor type. The Segm.Supervlsor 
record is defined by the following SWL construct? 

Segm_Supervisor = recor d 

Supervisor^CP ! Control_Point_Address, 

Queue ! qcb_po inter 
cassDd; 

Control_Polnt specified by the above record's 

Supervisor^CP field is notified of all error or 
access-violation events associated with the supervised 
segment via standard signalling mechanism. Signals are 
enqueued Into the queue defined by the Queue field. 

Supervisor = Nil is assumed to specify that the segment is 
not to be be supervised. 

Supervlsor_Event Signal List; 

To be defined. 

Status! (Output) - The Status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.1.2.1.2 SC fTERMINATE 

The purpose of this reque 
Segment Descriptors associ 
Temporary, Buffer Segment from 
Table or unconditionally te 
thus sever its association wit 
the requestor's or all oth 
Descriptor's are immediately 
associated Segment Control 
other Job's (e.g.* where the g 
removed when those Jobs assum 
also delete a temporary file* 
they are affiliated with the 
termination procedures execute 
requestor (see Queue parameter 



St is either to remove one or all 
ated with a Direct* Indirect, 

the reguestor's Segment Descriptor 
rminate a Segment Control Table and 
h the Segment Descriptors within 
er Address Spaces. Local Segment 
removed on terminating the 
Table. Segment Descriptor's' within 

oba I segment is Known) are also 
e Running Status. This request can 
or detach a permanent file when 

segment being terminated. Segment 

asynchronously with respect to the 
)• 



The macro format is as follows! 

SC#Terminate_Segment (Seg_Specif ier , 
Queue, Reserve, Status) 



Drop^Scope, Drop_Hode, 



Seg_Specifier I (Input) - The Seg_Specif ier parameter is a 
variable of union (Descriptor, Seg_PVA, FCB_Name, Fcbid) 
type. 

Descriptor parameter is a pointer variable of Locator 
type. A Physical_Fi le_Descriptor 's or 

Segment^C ontro I^Tabl e's position within the one-per-system 
Physical^Tables_Heap Segment is defied by that particular 
descriptor's Locator record (See ^.0 for details). TasK 
Services' procedures are permitted only to use this form 
of the Segm^Specif ier parameter. 

Seg_PVA parameter is a pointer variable of '*Cell type. It 
must specify a cell within an existing segment of the 
requestor's Address Space. 

FCB_Name parameter is a pointer variable of '^LNS.Narae 
type. It must specify the LNS name of a 

Fi le_Control_Block within the requestor's Address_Space. 

Fcbid parameter is a variable of 

Fi le_Control_BlocK.Identifier type. It must specify a 
Fi le_Control_Btock within the requestor's Address_Space. 

The Seg_Specif ier parameter is used to specify which 
Segment Descriptor is to be removed and/or the segment to 
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be terminated. 

Drop^Scope I (Input) - The Drop_Scope parameter is a variable 
of Segm_Drop_Scope = (Single, Group, Job, All) type. 

Single parameter specifies that only the Segment Descriptor 
defined by the Seg_PVA parameter is to be removed from the 
requestor's Segment_Descriptor_Table. The requestor's 
Control Attribute must be of Use Level or higher, or the 
request's Validation Level must be that of Task Services 
otherwise the request is rejected. 

Job parameter specifies that all Segment Descriptors 
associated with the segment specified by Seg_PVA, 
Descriptor or via the FCB_Narae/Fcbid parameter are to be 
removed from -the requestor's Segment_3escriptor_Tabl e. 
The requestor's Control Attribute must be of Pass Level or 
higher, or that of TasK Services, otherwise the request is 
rejected. 

Group parameter specifies that all Segment Descriptor's 
whose Key/Lock field is that of Seg^PVA should be removed 
from the requestor's Segment _Descriptor_Tabl e . The 

requestor's Control Attribute must be of Copy Level or 
greater, or that of Task Services. Otherwise the request 
is rejected. 

All parameter specifies that the segment is to be 
unconditionally made unknown in all Address Spaces and the 
respective Segment Descriptors removed system wide. The 
requestor's Control Attribute must be of Owner Level or 
that of Task Services otherwise the request is rejected. 
Forced_Seg_Terminate On_Condition wilt be caused by the 
Storage System in all other Jobs (e.g., where the 
specified segment is currently known) but that of the 
requestor. 

When Seg_Specifier i**! Descriptor, or Seg_Speclf ier i*i 
FCB_Name, or Seg_Specif ier i=i Fcbid Is specified 
Drop_Scope should be set to Job or Al I otherwise the 
request is rejected. 

Drop_Mode t (Input) - The Drop_Mode parameter is a variable 
of Segm_Drop_Mode = Set of (Pages, Segment, File) type. 

This parameter is ignored unless the requestor's Control 
Attribute statisfies one of the following conditionsi 
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It is of Use or higher Level and the 
Known by one Segment Descriptor. 



Segment is only 



o It is of Copy of higher Level y Drop^Scope (Group) is 
specified and the segment is only known by Segment 
Descriptors whose Key/Lock field is that of Seg^PVA. 

o It is of Pass or higher Level f Drop^Scope (Job) 
parameter is specified and the segment is only known in 
the requestor's Addresses pace. 

o It is of Owner Level or the requestor's validation 
Level is that of Task Services. 

Pages parameter is used to specify that all pages of the 
segment should be deleted from real memory and paging 
storage without updating the segment's storage space in 
external storage. Ths requestor should nave write access 
to the segment otherwise the request is rejected. 

Segment parameter is used to specify that the 
Segment _Contro l_Tabl e» and hence the segment? should be 
terminated. 

File parameter is used to specify that the file affiliated 
with a Direct Segment should be deleted* when it is a 
temporary file» or detached from the requestor's 
Address_Space when it is a permanent file. 



When $Segm_Drop_Mode t Segment] is specified a 
Indirect Segment is being terminated* then 
space of the associated file is automatical! 
memory. All modified pages are also copied 
storage* including pages directly contr 
SC#Map_Out request (see 6.1.2.1.3). In case 
does not want to return the modified pages 
Segment* then these should be released b 
SCiHReiease.PVA request (c.f.« 6.1.4.5) • 
parameter should be used with care since it 
those pages which are still in paging st 
been removed from the requestor's direct 
SC#Map.Out request. Automatic page upd 
performed when the associated Temporary file 
(e.g.* 'File' Is specified)* a permanent 
updated unless 'Page* is specified. 



nd a Direct or 
the storage 
y updated from 
from paging 
ol led by the 
the requestor 
of an Indirect 
y a previous 
The 'Page- 
also deletes 
orage but have 
control by a 
ating is not 
is terminated 
file is a i wa ys 



Queue i (Input) • The Queue parameter specifies a variable of 
qcb_pointer type. It defines the Queue to be used to 

NCR/CDC PRIVATE REV 06/23/75 
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receive request status signals and the final request 
completion signal. An SC#Terminate_Segment request is 
considered completed wnen all relevant pages are returned 
to external storage* or released* and system tables 
cleared. The requestor may use the Program Management 
event monitoring procedures (see Chapter IV) to keep 
informed of the progress of this request. When the Queue 
parameter is Nil* request completion is not signalled. 
The requestor is notified of unrecoverable errors by 
causing the respective On.Conditions within his stacks 
(see 6.1.3 for details). 



is a variable of 



Reserve! (Input) - The reserve parameter 
SD_Key type, where 

SD.Key = 0..63; 

It is used to reserve the terminated Segment Descriptor 
entry, within the respective Segment Descriptor Table(s)* 
for subsequent use by the SC#Init iate_Segment (see 
6.1.2.1.1) request. 

SD_Key t= 0, indicates that the descriptor entry(s) should 

not be reserved • 
SD_Key t= (i..63] indicates the descriptor entry(s) should 
"" be reserved for use by an entity with the 

specified key/lock. 

Status! (Output) - The status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.1.2.1.3 SC#MAP_IN 

The purpose of this request is to make a Direct Segment into 
an Indirect one. 

The macro format is as follows! 

SC#Map_In (Seg^Not Seg_PVAf Permi t_Map_Outf Accesst ControU 
Status) 

Seg_Not (Input* Output) - The Seg_No parameter is a variable 
of '*Cel I type. It specifies either the Segment Number to 
be used for the Indirect Segment or, when it is set to Nil 
initially, a pointer to the newly allocated segment 
descriptor is returned (see 6.1.2.1.1 for exact 
definition). Seg_No can be set to be the same as Seg_PVA 
(see below), in this case, no new Segment Descriptor is 
created. 

Seg_PVAi (Input) - The Seg.PVA parameter is a pointer 
variable of "Cell type to a data structure within an 
existing Direct Segment in the requestors Address Space. 
It is used to specify the subject Direct Segment. 

Permit_Map_Outx (Input) - The Permit_Map_ Out parameter is a 
variable of Boolean type. 

Permit_Map_Out = True is used to specify that Map_Out 
(c.f., 6.1.2.1.4) access is permitted to the storage space 
of the subject Direct Segment by an entity when it is 
accessed via the Segment Descriptor specified by Seg_No. 

Permit_Map_Out = False inhibits updating the subject Direct 
Segment's storage space by a Map.Out request. 

This request is rejected when the requestor specified 
Permit_Map_Out = True and it has no write access to the 
subject Direct Segment, unless its Control_Leve I is Copy 
or higher, or its Validation Level is that of Task 
Services. 

Access! (Input) - The Access parameter is a variable of 
'•Access^Descriptor type. Access.Descrip tor record's 

definition can be found in &.1.2.1.1 (see Access 
parameter). The specified Segment Descriptor's access 
control fields are initialized by Segment Control 
according to the fields of the Access_Descriptor record, 
specified by this parameter, and the access rules defined 
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by 6.1.1., with the following exception! 

o The new Segment Descriptor's access control field can 
have Write_Attribute even when the requestor's initial 
access was Read_Only to the Direct Segment and its 
Contro I^Attribute is at Use.Level. This alteration of 
the basic access_control rules is permissible since the 
Write_Access only applies to pages within temporary 
paging storage. 

Control! (Input) - The Control parameter is a variable of 
Seg_Control = (Owner, Pass, Copy, Use) type. It is used 
to redefine the Control Rights of the entity identified by 
the key field of the subject Segment Descriptor 
initialized/reinitialized by this request. (See 6.1.1 for 
detailed specification of Segment Access and Control Right 
rules.) 

Status! (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.1.^ SC#MAP OUT 

The purpose of this request is to return an Indirect Segment 
into its original Direct form and, in addition* transfer a 
selected set of pages/b locks from the Indirect Segment associated 
paging storage to the segment's external storage space. 

The macro format is as fpl lowst 

SC#Map_Out (Seg.PVA, PVA.Pairst Terminate_SO» Status) 

Seg_PVAi (Input) - The Seg_PVA parameter is a pointer 
variable of '•Cell type to a data structure within an 
existing Indirect Segment in the requestor's Address 
Space. It is used to specify the subject Indirect 
Segment. 

PVA_Pairsi (Input) - The PVA_Pairs parameter is a pointer 
variable of -*PVA_Pairs_List type. PVA_Pairs_List is 
described by the following SWL constructsi 

Address_Pair = record 

Spva I '"Cel I 9 

L pva t *Ce I I 
recend, 

PVA.Pair.List = Array 10..*] of Address.Pair , 

Spva parameter is a pointer variable of '"Ce I I type to a 
data structure in the first page/block of a set of 
consecutive pages, within the segment specified by the 
Seg_PVA parameter, to be transferred from paging storage 
to the respective segment's external storage space. 

Lpva parameter specifies a pointer variable to a data 
structure within the last page/block of a set of 
consecutive pages to be transferred. 

PVA_Pairs = Nil is used to specify that no pages/blocks 
within paging storage should be transfered to the external 
storage space. 

This parameter is ignored by the Storage System when the 
respective SC#Map_In request, creating the Segment 
Descriptor specified by Seg^PVA, had its Permit_Map_Out 
parameter set to False. 
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Terminate_SOt (Input) - This parameter is a variable of 
Boolean type. 

Terminate^SD = True is used to specify that the Segment 
Descriptor corresponding to the Seg_PVA parameter should 
be removed from the requestor ' s Segment Descriptor Table. 

Terminate_SD = False reverts the specified Segment 
Descriptor's Write_Access field to the state previous to 
that of the respective SC#Map_In request. 

Status! (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.2 Segment D 



,Iab.ig,tfaBlfiuIaliaD,Ssiay£^ls 



These set of requests control an Address Space owned Segment 
Descriptor Table's sizet reserve/release one or more Segment 
Descriptor entries .and alter the segment access attributes 
recorded Hi thin Segment Descriptors* 

6.1.2.2.1 SC#£XPAND gDJ 

The purpose of this request is to expand the size of an 
Address Space owned Segment Descriptor Table. 

The macro format is as fol lowst 

SC#Expand_SDT (Free_Entry_Cntf Status) 

Free_Entry_Cntt (Inputt Output) - The Fre e_Entry_Cnt 
parameter is variable of integer type. It is used to 
specify the number of unused entries required within the 
requestors Segment Descriptor Table. When the number of 
the currently free entries (e.g.t not allocated or 
reserved) is less than that requested Segment Control 
Expands the Segment Descriptor Table. The number of the 
new available entries is returned in this parameter on 
request completion. 

Status! (Output) - The Status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.1.2.2.2 SC»CQNTf?ACT SPT 

The purpose of this request is to contract the size of an 
Address Space owned Segment Descriptor Table. 

The macro format is as followst 

SC#Contract.SOT (Free_Entry_Cnt t Status) 

Free_Entry_Cnt t (Input $ Output) - The Free_Entry_Cnt 
parameter is a variable of integer type. It is used to 
specify the number of unused entries required to remain 
within the requestors Segment Descriptor Table. When the 
number of currently free entries is larger than that 
requested Segment Control attempts to reduce the size of 
the Segment Descriptor Table. A Segment Descriptor's 
position can not be changed while it is pointing to a 
valid Segment Control Table* therefore the SDT's size is 
only reduced down to the highest allocated entry. The 
remaining free entry count is returned on request 
completion within this parameter. 

Status! (Output) - The Status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.1.2.2.3 SC»RES E 



\ilBl 



The purpose of this request is to reserve one or more 
entries within a job's Segment Descriptor Table (SDT). 

The macro format is as tol lowsi 

SC#Reserve_SDT_Entry (Location t £ntry_Cntf Group» Key, Job, 
Status) 

Locationi (Input, Output) - The Location parameter is a 
variable of "Cel I type. It is used to specify the process 
segment number of the entry, or of the first entry within 
a group whose members should have consecutive segment 
numbers, to be reserved within the SDT. When the 
requested SDT entry (s) is not free, the request is 
rejected and the appropriate status code returned. 

A Location = Nil parameter specifies that the first (e.g., 
of a group), or only, entry can be reserved anywhere in 
the SDT. The reserved entry's segment number is returned 
on request completion as the <Segment_number> field of 
this parameter, with its ring number set to the caller's 
validation level and byte number field of Null. 

Entry_Cntt (Input) - The £ntry_Cnt parameter is a variable of 
integer type. It is used to specify the number of SOT 
entries to be reserved. The Storage System automatically 
expands the Segment Descriptor Table of the requestor when 
the number of free entries is less than that requested. 



Group! (Input) 
type. 



The Group parameter is a variable of Boolean 



Group = True is used to specify that a consecutive set of 
segment numbers should be reserved, in increasing order, 
starting with the one given in the Location parameter, or 
when this is Nil, anywhere in the SDT. 

Group = False specifies that the segment numbers (e.g., 
when Entry_Cnt > 1 is specified) do not have to be 
reserved as a consecutive group. 

Keys (Input) - The key parameter is a variable of integer 
type. It is used to specify the Key of the entity which 
can make use of the reserved entry(s) in the 
SC#Initiate_Segment or SC#Return_SDT_Entry requests. When 
key = is specified any entity can use the reserved 
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entry. 

Jobi (Input) - The Job parameter is a variable of 

Job_Ident if ier type. It is used to specify the Job's 

identifier which can make use of the reserved entry (s) in 
SC#Initiate_Segment request (see Job_Id parameter in 

6.1.2.1.1). When Job^Identi f ier = Null is specified 

segment control reserves the entry (s) for the requestor's 
job. 

Statusi (Input) - The Status parameter is a pointer to a 
standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.2.^ gC#R£TU£li^QI^iai£X 

The purpose of this request is to return one or more 
reserved entry(s) within the requestor's Segment Descriptor Table 
to non-reserved state. 

The macro format is as followss 

SC#Return_SDT_Entry (All, Location, Entry.Cnt, Status) 

Ails <Inout) - The All parameter is a variable of Boolean 
type. All = True specifies that all reserved entries 
whose Key field is the same as that of the requesting 
entity are placed into non-reserved state. When All = 
False is specified unreserving is performed as per the 
Location and Entry_Cnt parameters of this request. 

Locationt (Input) - The Location parameter is a variable of 
"^Cel I type. It is used to specify the process segment 
number of a particular entry, or the first entry of a 
consecutive group of entries whose members should be 
returned to non-reserved state. 

Entry_Cnti (Input, Output) - The Entry_Cnt paramter is a 
variable of integer type. It is used to specify the 
number of entries in a consecutive group to be returned to 
non-reserved state. When All - True is specified the 
number of unreserved entries is returned in Entry_Cnt on 
request termination. 

Status! (Input) « The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.2.5 ? C#CHAN6E ..AQCESS 

The purpose of this request is to change the access 
attributes of a Segment Descriptor within the requestor's Segment 
Descriptor Table. 

The macro format is as followsl 

SC#Change_Access (Seg_PVA, Access, Control, Status) 

Seg_PVAi (Input) - The Seg_PVA parameter specifies a pointer 
variable of "Cell type. It must specify a Cell within an 
existing segment of the requestor's Address Space. Its 
<segment_number> field is used by Segment Control to 
locate the respective Segment Descriptor whose access 
attributes are to be caanged. 

Access! (Input) - The Access parameter is a variable of 
•^Access^Descriptor type. Access_Descriptor records' 

definition can be found in 6.1.2.1.1 (see Access 
parameter). The specified Segment Descriptor's access 
control fields are reinitiat I ized by Segment Control 
according to the fields of the Access_Descriptor record, 
specified by this parameter, and the access rules defined 
by 6.1.1. 

Control I (Input) - The Control parameter is a variable of 
Seg_Control = (Owner, Pass, Copy, Use) type. It is used 
to redefine the Cotrol Rights of the entity identified by 
the key field of the subject Segment Descriptor 
reinitialized by this request. (See 6.1.1 for detailed 
specification of Segment Access and Control Right rules.) 

Statust (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 



1 
2 
3 
^ 
5 
6 
7 
8 
9 
10 
11 
12 
13 
1^ 
15 
16 
17 
18 
19 
20 
21 
22 
23 
2k 
25 
26 
27 
28 
29 
30 
31 
32 
33 
3^ 
35 
36 
37 
38 
39 
^0 
^1 
hZ 
^3 
kk 
k5 
kb 
1*7 
<»6 



NCR/CDC PRIVATE REV 06/23/75 



NCR/CDC PRIVATE REV 06/23/75 



ADVANCED SYSTEMS LABORATORY 
IPLOS G:jS - Storage Management 



CHOTQi* 



6-33 
75/06/26 



6.0 USER INTERFACE AND FACILITIES 

6.1.2.3 Segment Attribute Manipulation Requests 



ADVANCED SYSTEMS LABORATORY 
IPLOS GOS - Storage Management 



CH070^ 



6-3^ 
75/06/26 



6.0 USER INTERFACE AND FACILITIES 
6.1.2.3.2 SC#EXPAND_SEGMENT 



6.1.2.3 Saqin^nt AttrilMtg ManiPMtatlgn Rgqggsts 



The following set of requests alter the physical attributes 
of a segment or provide information on its current status. 



6.1.2.3.1 



-JJEHfilM 



The purpose of this request is to set a new limit on the 
size of a segment. The requestor must have owner rights or its 
validation level must be that of Task Services. 

The macro format is as followsi 

SC#Set_Max_Length (Seg_PVA, Length* Status) 

Seg_PVAi (Input) - The Seg.PVA parameter is a pointer 

variable of "Cell type to a segment within the requestor's 

Address Space. It specifies the segment whose Length is 
to be changed. 

Length! (Input, Output) - The Length parameter is a variable 
of integer type. It specifies the segment's Max_Length in 
bytes. It must be a multiple of Block_Size. This request 
can not reduce a segment's Max_Length below the highest 
blocK written. The previous Segment length is returned in 
this parameter on request completion. 

Status! (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing* 
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6.1.2.3.2 SCf£XPAND SSGMENT 



The purpose 
storage space to 



of this request is to allocate additional 
i segment beyond its highest allocated block. 



The macro format is as follows! 

SC#Expand_Segment (Seg_PVA» Expansion_Increment t Status) 

Seg_PVAl (Input) - The Seg_PVA parameter is a pointer 
variable of ~Cel I type to a segment within the requestor's 
Address Space. It specifies the segment whose size should 
be expanded. 

Expansion_Increroent ! (Input, Output) - The Expansion 
Increment is a variable of integer type. It is used to 
specify the additional storage space to be allocated in 
bytes. Segment Control rounds this up to multiple of 
block-size for Temporary and Butter Segments and to the 
Physical File Descriptor dependent file 

Expansion_Increment for Direct and Indirect Segments. The 
allocated storage space's size is returned in this 
parameter on request completion in bytes. 

Status! (Input) - The Status parameter specifies a pointer to 
a standard status request. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.3.3 SCfCONT 

The purpose ot this request is to reduce the size of the 
preal I ocatedf not_used (e.g.f not initialized or written to) 
storage space of a segment beyond its highest block written. 

The macro format is ds followst 

SC#Contract_Segfflent (Seg__PVAf Reduction* Status) 

Seg_PVAt CInput) - The Seg_PVA parameter is a pointer 

variable of ^Cel I type to a segment within the requestor's 

Addresses pace. It specifies the segment whose size should 
be contracted. 



Reductioni (Input* Outpu 
variable of integer typ 
reduction in allocate 
Control rounds this dow 
Temporary and Buffer 
Descriptor dependent fi 
and Indirect Segments 
deallocated is returned 
completion in bytes, 
not used storage space 



t) - The Reduction parameter is a 
e. It is used to specify the 
d storage space in bytes. Segment 
n to multiple of block-size for 

Segments and to the Physical File 
le Expansion^Increment for Direct 
• The amount of storage space 

within this parameter on request 
Reduction = Null specifies that all 
is to be deallocated. 



status! (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.3.t> 5C 

The purpose of this request is to release all not used 
(e.g. 9 not written to or initialized) storage space of a 
segment. 

The macro format is as foi lowst 

SC#Truncate_Segoent (Seg_PVA» Storage* Status) 

Seg_PVAi (Input) - The Seg_PVA parameter is a pointer 
variable of "Cel h type to a segment within the requestor's 
Address Space. It specifies the segment which is to be 
truncated. 

Storage: (Output) - The storage parameter is a variable of 
integer type. On request completion Segment Control 
returns the subject segment's allocated storage space size 
in bytes in this parameter. 

Statusi (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.3.5 ^C#RE1,£^E. PVA 

The purpose of this request is to release a set of 
consecutive blocks (e.g.« return there into the free storage pool) 
from the storage space of a Temporary or Buffer Segment. The 
requester must have write access to the segment or its 
Control_Attribute must be at least of Copy Level. 

The macro format is as fol lowsi 

SC#Release_PVA (Lpva« Spva* Status) 

Lpvat (Input) - The Lpva parameter is a variable of *Cell 
type to a data structure within the first block to be 
released from storage and deleted trom real memory. 

Spvat (Input) - The Spva parameter is a variable of "^Cell 
type to a data structure within the last block to be 
released from storage and deleted from real memory. 

Pages within the specified virtual address range and 
currently within paging storage are also deleted. 

Status* (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.3.6 



5M ENT 



The purpose of this request is to permit a user to retrieve 
the a status and current attributes of a segment. 

The macro format is as followsi 

To be supplied when detailed internal design of the Storage 
System is completed. 
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6. 1.2. 4 Segment Sha rj| 



Segment sharing requests provide the general capabity for 
controlled access to sets of pages/blocks in a multi-thread 
environment. Consecutive pages/blocks can be reserved for 

exclusive update and shared read only access within one or more 
segments simultaneously* The Storage System supports internal 
queuing primitives for awaiting the release of reserved virtual 
memory areas. It also detects existing deadlocks. A rollback 
facility can be invoked to reverse the effect of a set of 
updatesf in case of a deadlocKf internal system or user error. 

6.1.2.4.1 SC»MAKg^QtgSAL 

The purpose of this request is to make an Address_Space 
local segment globally shareable among Address Spaces." The 
request is rejected unless the requestor's Contro I.Attr ibute is 
own or its Validation Level is that of Task Services and the 
segment was initially initiated with Usage (Public) attribute. 

The macro format is as f ol lowst 

SC#Make_Global (Seg_PVA, Status) 

Seg_PVAi (Input) - The Seg_PVA parameter specifies a variable 
of ''Cell type. It must specify a Cell within an existing 
segment which is current Local to the requestor's Address 
Space. Segment Control changes the segment's Local status 
to Global* thereby making it accessab le from other Address 
Spaces. 

Statust (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.1.2.4.2 SC»MAKE LOCAL 

The purpose of this request is to return a globally 
shareable segment to local status with respect to the requestor's 
Address Space. The request is rejected unless the requesting 
entitie's Control_At tribute is Own or its Validation Level is 
that of Task Services and the segment is not known • in any other 
Address Spaces beside that of the requestor. 

Segment_Control_Tabl e and Physica l_Fi le_Oescriptor of an 
Address Space local segment is automatically removed from memory 
to paging storage when the respective job is placed into Deferred 
Statet thereby enhancing memory utilization (see 4.0 for 
details). 

The macro format is as fol lows! 

SC#Make_Local (Seg^PVA, Status) 

Seg_PVAf (Input) - The Seg_PVA parameter specifies a variable 
of "Cell type. It must specify a Cel I within ar\ existing 
globally shareable segment. 

Statusi (Input) - The Status parameter specifies a pointer to 
a stadard status record. It must always be specified or 
the request is not accepted for processing. 
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The following six request's external interface specification 
is closely dependent on certain, internal design trade-offs made 
within the Storage System (i.e.t the flexibility of the table 
space maintenance procedures» recovery/restart capability^ 
external storage space/memory /CPU overhead used* etc.). They 
will only be defined when the Storage System's internal design is 
completed on July 31* 1975. 

6.1.2.^.3 SC»CREATE TRANSACTION LIST 

To be defined. 
6.1.2.^.^ ?CfREM9V£..TRANSACTIQN LIST 

To be defined. 
6.1.2.^.5 SCffRgGISTEi^ TRAN SACTION SET 

To be defined. 
6.1.2.^.6 SC#STA RT TRANSACTION 

To be def ined. 
6. 1.2. it. 7 SCfSyXT TRANSACTION SET 

To be defined. 
6.1. 2. i*. 8 SC#LOCK , P VA RANGg 

To be defined. 
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6.1.3 REQUEST STATUS INFORMATION 



To be supplied when the internal design of the Storage 
System is completed. 



6.1.4 REQUEST PROCESSING SEQUENCES 



To be supplied when the internal design of the Storage 
System is completed. 
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6.0 USER INTERFACE AND FACILITIES 

6.2. 1.1 Page Usage Prediction Requests 



They are grouped into the 



6.2 £ft&£ ggiJiSflL-EkaMESIS 



Page Control Requests are used to manage virtual memory 
usage and page frame residency, 
following categoriest 

A. Usage Prediction Requests! 

MC#Advise_In 

o MC#Advise_Out 

o MC#Clear_PVA 

o MC#Set_Usage_Level 

B. Memory Management requestsi 

o MC#Lock_PVA 

o MC#UnlocK_PVA ' 

o MC#Fix_Meraory 

o MC#Release_Memory 

C. Status requestsi 

o MCiStatus^WS 
o MC#Status_Page 
o MC#Status_Request 



6.2.1 REQUEST DESCRIPTIONS 



The following subsection contains a description of requests 
accepted by Page Control. 

Request status codes t which are set before returning from 
each requestf and request processing are described in sections 
6.2.2 and 6.2.3* respectively. 
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6.2.1.1 £a5£-U53Sfi_£llfi^£l-LQD-S£jaiifial5 



Page usage prediction request enable a user to advise the 
system of intended virtual memory access pattersf when known in 
advance* thereby inproving system efficiency. These requests 
also permit close control over the updating of external storage 
space* when required* thus enhancing system resiliency. 

6.2.1.1.1 MC#AD\/ISE I N 

The purpose of this request is to transfer a set of 
consecutive pages/blocks* within one segment* from external 
storage to memory. This request executes asynchronously with 
respect to the requestor (see Queue parameter). 

The macro format is as follows! 

MC#Advise_In (Spva* Lpva* Queue* Rid* Option* Status) 

Spvai (Input) - The Spva parameter specifies a pointer 
variable "^Cel I type to a data structure within the 
first page/block to be retrieved 

Lpva* (Input) - The Lpva parameter specifies a pointer 
variable of '"Cell type to a data structure within the 
last page/block to be retrieved. 

Queuet (Input) - The Queue parameter speci ties a pointer 
variable of type qcb.pointer. It defines the Queue to 
be used to receive request status signals and the final 
request completion signa I • An Advise_In request is 
considered completed when al I relevant pages have been 
retrieved from mass-storage. When the Queue paraneter 
is Nil* request completion is not signalled. The 
requestor may use the Program Management event 
monitoring procedures (see Chapter IV) to keep informed 
of the progress of this request. 

Status Signal List; 

To be defined. 

Ridi (Output) - The Rid parameter specifies an integer 
variaole of Request^Identifier type« Rid is returned 
on request initiation to allow subsequent monitoring of 
this request by a MC#Status_Re quest. 
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Optionsi (Input* Optional) - The Options parameter specifies 
a variable of Advise_In_Opt ion = Set of 

(Extencl_Segment , WSS_Override» Error_Report ) type 
indicators. 

Extend_Segment indicator inhibits rejection of this 
request when the requested transfer extends beyond the 
current segment . I ength» Automatic mass-storage space 
allocation takes place up to the maximum permitted 
segment size. The new pages are initialized to Null. 

WSS_Override indicator specifies that this request is not 
to be processed when either 

o The number of free page frames is insufficient to 
satisfy its requirements. 



o The job's WSS 
processing. 



Limit might be exceeded during 



Error_Report indicator specifies that a full error report 
should be returned via the Queue when any recoverable 
or unrecoverable t ransf er/meroory-parlty errors occur 
during request processing. 

dais The requestor is notified of unrecoverable errors by 
signalling the respective On_Conditions within his 
StacKs. (see 6*2.3 for details)* 

Status! (Output) - The Status parameter specifies a pointer 

to a standard status record. It must always be 

specified or- the request is not accepted for 
processing. 
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6.2.1.1.2 



,Q UT 



The purpose of this request is to transfer a set of 
consecutive pages/b I ocKs« within one segment f from memory to 
external storage and/or move pages/blocks from paging storage to 
the associated mass-storage space of an Indirect Segment. This 
request executes asynchronously with respect to the requestor 
(see Queue parameter) • 

The macro format is as fol lowsi 

MC#Advlse_Out (Spva» Lpva* Queue* Rid* Option* Status) 

Spvai (Input) - The Spva parameter specifies a pointer 
variable of 'Xel I type to a data structure within the 
first page/block to be removed. 

Lovai (Input) - The Lpva parameter specifies a pointer 
variable of '"Cell type to a data structure within the last 
page/block to be removed. 



Queue (Input) - 
variable of t 
used to retrie 
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The Queue parameter specif 
ype qcb_pointer. It defines 
ve request status signals 
etion signal. An Advlse_0 
pleted when all relevant pa 
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is request. 



ies a pointer 
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t completion is 
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Status Signal List 

To be def Ind . 

Ridi (Output) - The Rid parameter specifies an integer 
variable of Request_Identif ler type. Rid is returned on 
request initiation to al low subsequent monitoring of this 
request by an MC#Statu5 Request. 

Option! (Input* Optional) - The Option parameter specifies a 
variable of Advlse_Out„Optlon = Set of (Update* 
Update_Storage* Keep_WS* Keep.Lock* Error^Report) type 
indicators. 

When $Advise_Out_Optlon [ 3 is specified* Page Control 
assumes that the requestor completed using the indicated 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1.1.2 MC# ADVISE^OUT 



pages/blocks and thus wants them removed from the job's 
Working Set. Page Table entries corresponding to the 
page-frames occupied by the pages* within the requestor's 
Working Set* are set invalid and the pages placed into the 
Free or Shared Queues (see 2.5.2). The Initial_Lock (see 
6. 1.2.1.1 parameter Usage! Lock^Option) is also removed 
from these pages. Effected pages could be in other job's 
Working Set when the target Segment is globally shared. 
In this case> the Initial_Lock is again removedt Use_Bits 
in the affected Page Table entries are reset » and the 
page-frame's Age_Count set to AIC (see 2.5.3) thus the 
pages are made candidates for leaving immediately the 
respective Working Set. Exact control over their future 
me mor y/ pa g i ng storage/mass-storage residency is determined 
by the condition of the specific optional indicators. 

Update indicator specifies that the external /paging storage 
space corresponding to the virtual address range should be 
immediately updated from memory. Page Table entries are 
marked invalid until request completion and placed into 
the Free/Shared Queues with Initial^Lock removed* or left 
within their original Working Sets as described in the 
previous paragraph. 

Update_Storage indicator's effect is similar to that of the 
simple Update* however* when it is used on an Indirect 
Segment or whi le automatic page migration is in force, the 
storage space of the associated file is also updated. The 
requestor thus can enforce the updating to take place in 
well defined groups of pages/blocks thereby enhancing the 
resiliency of update processing. Pages/blocks within 
paging storage can be removed by a subsequent 
SC#Release_PVA request. 

Keep_WS indicator inhibits removal of the effected pages 
from the requestor's Working Set. Their Use_Bit is 
cleared* Initial^Lock removed* Age_Count set to AIF and 
thus made candidates for reuse by a subsequent 
page-interrupt or SC#Advise_In request. This option 
enables a user to kep complete control over his Working 
Set Size. 

Keep_Lock indicator inhibits removal of the Initia l_Lock. 
(It is going to be used by the Storage System to keep 
precise control over its own internal Table Space). 

Error_Report indicator specifies that a ful I error report 
should be returned via the Queue when any recoverable or 
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unrecoverable transfer/memory parity errors occur during 
request processing. 

N ote t The requestor is notified of unrecoverable errors 
by signalling the respective On_Condit ions within 
his stacks (See 6.2.3 for details). 

Statusi (Output) - The Status parameter specifies a pointer 
to a standard status record. It roust always be spcified 
or the request is not accepted for processing. 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1. 1.3 MC#CLEAR_PVA 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1.1.3 MC#CLEAR PVA 



6.2.1.1.3 

The purpose of this request it to clear a set of consecutive 
pages/blocKs within one segment. 

Tne macro format is as fol loMSt 

MC#Clear_P\/A (Spva, Lpva* Optiont Status) 

Spvai (Input) - The Spva parameter specifies a pointer 
variable of a '"Cell type to a data structure within the 
first page/blocK to be cleared. 

LpvaJ (Input) - The Lpva parameter specifies a pointer 
variable of "Cell type to a data structure within the last 
page/blocK to be cleared. 

Optiont (Input) - Th6 Option parameter specifies a variable 
of Clear^Option = Set of (C I r_Modif ledt Clr_Partialf 
Clr_Direct) type indicators. 

When $C iear.Option CJ is specified unmodified pages/blocKs 
within the indicated virtual address range* and currently 
in memory f are deleted. 

Clr_Modified parameter is used to specify that modified 
pages should be cleared and the external storage space of 
a Temporary Segment or an Indirect_Segraent*s Paging 
storage* corresponding to the virtual address range* 
should be treated as not initalized in any subsequent 
accesses. The requestor must have write access to the 
segment when this option is used otherwise the request is 
rejected. A Direct Segment's external storage space is 
not reset (see Clr_Direct Option). 



Clr_Partial parameter 
completely within the 
partially cleared. 
(maximum of two* one at 
Nul I as specified, 
resident pages* or Indi 
storage* are retrieved 
the free or Shared Queu 
access to the segment 
the request is rejecte 
storage space is not re 



specifies that pages/blocKs not 
address range should be also 

Currently memory resident pages 

each end of the range) are set to 
A Temporary Segment's non-memory 
rect Segment's page(s) in paging 
• partially cleared and placed into 
e. The requestor must have write 

when this option is used otherwise 
d. A Direct Segment's external 
set (See Clr^Direct option). 



Clr_Oirect parameter must explicitly specify that the Storage 
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e Descriptor only c 
block written to* 
erwrite the exter 
performing th 
lr_Partial options 
s is a high overhea 
ion (clearing/free 
can be done effici 
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I address range of a 

be reset to Null. Since 

ontains the address of 

the Storage System must 
nal storage space with 
e equivalent of the 

for a Direct/Indirect 
d operation and should be 
ing Temporary Segments' 
ently since only internal 
requestor must have Write 
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StatusS (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 
the request is not accepted for processing. 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1.1.it MC#SET_USAGE_LEVEL 



6.2.1.1.^ MC#SET USAGE LEVEL 

The purpose of this request 
intended Working Set Usage pattern, 
improved memory utilization. 

The macro format is as folioHst 



MC#Set_Usage__Level (Usage_Specif ier. Status) 



is to advise the system of 
Its use can result in 



pointer variable of 
is described by the 



Usage_Specif ier parameter is a 
^'Usage^.Array type. Usage_Array 
following SWL constructs* 

IVJlfi. 

Usage_Record = record 

Spve I ""Cel If 

Lpva s ~Cel I « 

Usage i Bool ean 
re(;end. 

Usage_Array = Array 1 0. .♦! of Usage^Record; 

Spva parameter is a pointer variable of ''Cell type to a 
data structure in the first page/block of the page-set 
within a segment whose Usage_Level is to be respecified. 

Lpva parameter is a pointer variable of *Ce I I type to a 
data structure within the last page/block of the page-set 
whose Usage.level is to be respecified. 

Usage parameter equal to False specifies that the 
page-frames associated with the pages within the page set» 
in the virtual address range Spva..Lpvaf should be made 
candidates for reuse (e.g.t if still within the job's 
Working Set) and thus the pages will be removed from the 
WS when a new page frame is required. 

Usage s= True specofies that pages within the virtual 
address range Lpva. .Spva should remain within the Job's WS 
or includedf if still in memory and the resulting increase 
in WS size is below the permitted WSS max. 

Usage^Array specifies page-set's disposition » within the 
job's WS» with respect to their estimated future usage. 
It is used to advise the system of any gross alternations 
in membership of the Working Set. 

NCR/COC PRIVATE REV 06/23/75 
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Status! (Output) - The Status parameter specifies a pointer 
to a standard status record. It roust always be specified 
or the request is not accepted for processing. 
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6.0 USER INTERFACE AND FACILITIES 
6«2*1*2 Memory Management Requests 
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6.0 USER INTERFACE AND FACILITIES 
6.2. 1, 2.1 MC#LOCK_PVA 



6.2.1.2 M&iBflrY.,tlaDag£iBSDl._Rfigy£Sl5 



Memory Management requests enable a user to control the real 
memory residency of his code/date pages/btocKs and to gain access 
to specific real memory locations. 

6.2.1.2.1 MC#LO CK PVA 

The purpose of this request is to suspend paging operation 
on a set of consecutive pagesy within one segment. T'^e specified 
pages/blocKs are retrieved from external storaget when not 
already in memory* and the respective page- frames" locK^count 
fields updated within the Storage System's internal Memory Map 
(see ^.0 for details). The requestor must be a System Job or its 
•profile* must contain Lock_PVA capability (see Chapter 9, 
2.10.1.1.8) otherwise the request is rejected. 

Job_Identity/page_frames_l ocked information is maintained by the 
Storage System to permit control of lock removal /restoration on 
swapping or job termination. It is possible to create segments 
(see 6.1.2.1.1) whose pages are always locked while in use (see 
6.2.1.1.2) or during the owning Job's major time-slice. 

Block Management and Device Driver routines always transfer 
data into/out-of already locked memory (see 1.2.1 and 5.0) and do 
not have to use this request. 



This request executes asynchronously 
requestor (see Queue Parameter). 

The macro format is as fol lowsl 



with respect to a 



MC#Lock_PVA (Spva» Lpva* Ridt Queue, Option, Status) 

Spvat (Input) - The Spva parameter specifies a pointer 
variable of "Cell type to a data structure within the 
first page/block to be locked. 

Lovat (Input) -The Lpva parameter specifies a pointer 
variable of *Cel I type to a data structure within the last 
page/block to be locked. 

Queuet (Input) - The Queue parameter specifies a pointer 
variable of qcb_pointer type. It defines the Queue to be 
used to retrieve request status and the final request 
completion^ signal. A Lock_PVA request is considered 
completed when all relevant . pages/blocks have been 
retrieved from external storage and locked into the 
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associated page- frames. Request completion is not 
signalled when the Queue parameter is set to Nil. The 
requestor may use the Program Management event monitoring 
procedures (see Chapter IV) to keep informed of the 
progress of this request. 

Status Signal Listt 

To be defined. 

Ridt (Output) - The Rid parameter specifies an integer 
variable of Request.Identif ier type. Rid is returned on 
request initiation the allow to subsequent monitoring of 
this request by a MC#St atus^Request . 

Option! (Input) - The Option parameter specifies a variable 
of Lock_PVA_Option = Advise_In_Opt ion type indicators. 
See 6.2.1.1.1 for detailed specification. 

Statusi (Output) - The Status parameter specifies a pointer 
to a standard status record. It roust always be specified 
or the request is not accepted for processing. 
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6.2.1.2.2 MCiUNLOCK . Py^ 

The purpose of this request is to restart paging operation 
on a set of consecutive pages/blocks within one segment. Unless 
a previous MC#Lock_PVA operation has been performed by the 
requesting Job on all pages/blocks specified by this requestt the 
request is re]ected.- Pages can be unlocked on a page-by-page 
basis. 

The macro format is as foltowst 

MC#Unlock_PVA (Spva« Lpva« Option* Status) 

Spvat (Input) - -The Spva parameter specifies a pointer 
variable of '^Cel I type to a data structure within the 
first page/block to be unlocked. 

Lpvai (Input) - The • Lpva parameter specifies a pointer 
variable of "^Cel I type to a data structure within the last 
page/block to be unlocked. 

Optioni (Inputt Optional) - The Options parameter specifies a 
variable of Unlock_PV A_Option = Set of (Remove_WS» 
Rel ease_Pages) type indicators. 

Hhen $Un I ock_PV Adoption C 3 is specified* Page Control 
assumes that the requestor intends paging operations to 
restart. The one-per-page lock count is decreased* within 
the Storage System's internal tables* and when it becomes 
zero* the affected Page Table entries Use bit is cleared. 
The associated page frame's Age_Count is set to AIF (see 
2.5.3) and* unless accessed soon* made a candidate for 
eventual reuse. 

Remove_WS indicator specifies that pages within the 
indicated virtual address range should be removed from the 
job's Working Set. 

Rel ease^Pages indicator specifies that pages within the 
indicated virtual ddress range should be deleted from real 
memory and the asssociated page-frames freed. The 

requestor must have write access when any of the affected 
pages has been modified. A page partially included in the 
virtual address range is not deleted and only cleared as 
specified. 

Statusi (Input) - The Status parameter specifies a pointer to 
a standard status record. It must always be specified or 

NCR/CDC PRIVATE REV 06/23/75 
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the request is not accepted for processing. 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1.2.3 MC#FIX.MEMORY 



6.2.1.2.3 

The purpose of this request is to allocate permanently 
(e.g.* for the. life-time of the owning Job or until released) a 
continuous section of real memory and associate it with a virtual 
address range within one segment. 

Principal users of this request are Diagnostic Subsystemy 
I/O Subsystem* Storage System* Block Manager* System Monitor 
which either want access to specific 'real* memory addresses or 
require a non-pagable continuous real memory area (i«e«* lORB's 
and Segment Oescritor Tables)* 

Storage System can not guarantee ins tantan eous allocation* 
and in turn* it is a user of System Monitor* Block Management and 
the I/O Subsystem. These operating system modules must maintain 
enough rese rvQfj space to permit Page Control to function while 
freeing up memory. 

A Job issuing this request must be a System Job or have 
Fix_Memory capability. 

This request can execute asynchronously with respect to a 
requestor (see Queue parameter)* 

The macro format is the fo Mowings 

MC#Fix_Memory (Memory_Location* Spva* Length* Queue* Rid* 
Option* Status) 

Memory_Locationi (Input* Output) - The Memory_Location 
parameter is a variable of Real_Addressi integer type. It 
is used to specify the address of the real memory section 
to be allocated in bytes. 

When Real^Address = 2*»3i-l is specified Page Control 
assumes that it is free to allocate a memory area of 
sufficient size anywhere in real storage with the least 
amount of 'global allocation cost*. Its address is 
returned within the Memory_Location parameter for a 
synchronous request (e.g.* Queue -Nil! is specified* see 
Queue parameter below). It is part of the request 
completion signal for the asynchronous case. 

When Real.Address is not equal to 2*»3i-l is specified 
Page Control attempts to allocate memory at the requested 
address. It performs paging or memory_move operations to 
free the required area unless this includes locked or 
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fixed page-frames. In this case* it 
this request (see Enqueue option). 



rejects or queues 



Spvat (Input* Output) - The Spva parameter specifies a 
pointer variable of "Cell type to a data structure within 
the first page/block to be fixed. 

When Spva"s <byte-of f set> = 2*»31-1 is specified Page 
Conrol assumes that the process virtual address' byte 
offset within the associated segment should be equivalent 
to the real memory address of the fixed area. Spva is set 
and returned accordingly for a synchronous request (see 
Queue parameter below). It is part of the request 
completion signal for the asynchronous case. 

Lengthi (Input* Output) - The Length parameter is a variable 
of integer type. It is used to specify the length of the 
memory area to be fixed in bytes. Page Control can only 
assign whole multiple of pages* therefore* Length is 
rounded-up accordingly and the size of the allocate memory 
is returned within this parameter for a synchronous 
request. It is part of the request completion signal for 
the asynchronous case (see Queue parameter below). 



Queue t (Input) - 
variable of q 
used to retrie 
completion si 
completed whe 
location is 
Storage System 
the virtual 
storage are 
Request comp 
parameter is s 
synchronously 
put in wait st 



The Queue parameter specifies a pointer 
cb_pointer type. It defines the Queue to be 
ve request status and the final request 
gnal. A Fix_Memory request is considered 
n a memory area of specified size and 
found and assigned fixed status within the 
•s internal tables. Pages corresponding to 
address range of the fixed_area in external 
not allocated or retrieved when exist, 
letion is not signalled when the Queue 
et to Nil and the request is processed 
with respect to the requestor (e.g.* it is 
ate). 



The requestor may use the Program Management event 
monitoring procedures (see Chapter IV) to keep informed of 
the progress of this request. 

Status Signal List 

To be defined. 



RidI (Output) - 
variable of 



The Rid parameter specifies an integer 
Request_Identif ier type. Rid is returned on 
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6.0 USER INTERFACE AND FACILITIES 
6.2.1.2.^ MC#RELEASE_MEMORY 



request initiation to alloH subsequent monitoring of 
request by a MC#Status_Request. 



this 



Options (Input) - The Option parameter specifies a variable 
of Fix_Option = Set of < WSS^Overridet Enqueue) type 
indicators. 

WSS_Override indicator specifies that this request is not 
to be processed when the Job's WSS Limit might be exceded 
during processing. This parameter is only relevant for a 
subsystem Job since System Job(s) WSS is only limited by 
the size of the available real memory. 



Enqueue i 
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Queue 
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that this re 
of sufficient 
s available, 
is not equal 
immediate ly ( 
i I able or lock 
emory address) 
to cancel this 
raett after a 



quest should be 
size and/or at 
An intermediate 
to Nil and the 
e.g. 9 not large 
ed/fixed pages 
A subsequent 
request* when 
sufficient time 



Statust (Output) - The Status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.2.1.2.^ nC#R£L£&S£,riEHQRY 

The purpose of this request is to release a continuous 
section of real memory from fixed status allocated by a previous 
Fix_Page request. A continuous area of memory can be returned in 
subsections* however* these must be at the beginning or end of 
the initially allocated area. The virtual address range 
corresponding to the released memory area is treated as if a 
Clear_PVA operation has been performed. 

The macro format is as fol lowst 

MC#Release_Memory (Spva* Length, Status) 

Spvai (Input) - The Spva parameter specifies a pointer 
variable of *Cel 1 type to a data structure within the 
first page to be released from fixed status. 

Length! (Input* Output) - The Length parameter is a variable 
of integer type. It is used to specify the length of the 
memory area to be released in bytes. Page Control can 
only fix/release whole multiple of pages* therefore Length 
is rounded-up accordingly and the size of the released 
memory area is returned in bytes. 

Statust (Output) - The status parameter specifies a pointer 
to a standard status record. It must always be specified 
or the request is not accepted for processing. 
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6.0 USER INTERFACE AND FACILITIES 
6«2.i.3 Status Requests 
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6. 2. 1. 3 Status Req ues ts 



These requests permit a user to retrieve the status of 
individual pages/page-f rames» or that of job Working Sets. The 
processing of asynchronous requests, can be monitored and 
terminated forcibly* 

6.2.1.3.1 MQ#STATUS W i> 

The purpose of this request is to retrieve the status of 
pages within a Job's Working Set. 

The macro format is as follows: 

To be supplied when the detailed internal design of the 
Storage System is completed. 

The purpose of this request is to retrieve the status of a 
page or a page-frame. 

The macro format is as follows! 

To be supplied when the detailed internal design of the 
Storage System is completed. 

6.2.1.3.3 MC»STATMS REQUEST 

The purpose of this request is to monitor the progress of an 
asynchronous request being processed by Page Control. 

The macro format is as follows! 

To be supplied when the detailed interr^al design of the 
Storage System is completed. 
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6.2.2 REQUEST STATUS INFORMATION 



To be supplied when the internal design of the Storage 
System is completed. 



6.2.3 REQUEST PROCESSING SEQUENCES 



To be supplied when the internal design of the Storage 
System is completed. 
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6.0 USER INTERFACE AND FACILITIES 
6.3 SYSTEM INTERFACE REQUESTS 

^•3 SYSTEM INTERFACE R^QU^ST? 1 

2 
3 
System Interface Requests are used to define the Storage k 

System's operational environment and the Utility* Restart and 5 

Recovery Functions performed for* or in conjunction with» other 6 

elements of IPLOS. They are grouped into the the following 7 

categories! 8 

9 

A. Table Definitions 10 

11 

B. Utility Functions 12 

13 

C. Restart and Recovery Functions l^* 

15 

To be supplied when the detailed internal design of the 16 

Storage System is completed. 17 
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